Code Injection Vulnerability in Apple Xcode Bundled Binaries
CVE-2023-32383

7.8HIGH

Key Information:

Vendor
Apple
Status
macOS
Vendor
CVE Published:
10 January 2024

Summary

A code injection vulnerability exists in sensitive binaries bundled with Xcode, which could allow malicious applications to execute unauthorized code. This vulnerability has been addressed with enhanced security measures, including the enforcement of hardened runtime across affected binaries. Users of macOS Monterey, Big Sur, and Ventura are advised to update to the latest versions to mitigate potential risks associated with this vulnerability.

Affected Version(s)

macOS < 13.4

macOS < 12.6

macOS < 11.7

References

https://support.apple.com/en-us/HT213758
https://support.apple.com/en-us/HT213759
https://support.apple.com/en-us/HT213760

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.