System Termination Vulnerability in Apple macOS Products
CVE-2023-32436

7.1HIGH

Key Information:

Vendor

Apple
Status
macOS
Vendor
CVE Published:
10 January 2024

What is CVE-2023-32436?

A vulnerability in Apple macOS products allows an app to potentially cause unexpected system termination or manipulate kernel memory. This issue has been mitigated in macOS Ventura 13.3 with enhanced bounds checks, ensuring improved security against unauthorized memory access and system instability.

Affected Version(s)

macOS < 13.3

References

https://support.apple.com/en-us/HT213670

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.