Apple Security Update Sep 2023 Vulnerability Summary (CVE-2023-42892 etc.)

Critical Vulnerability Information Automation CVE: CVE-2023-42892 Impact: An application with root privileges may be able to access private information. Fix: Resolved via improved checks. CoreAnalytics CVE: CVE-2023-40449 Impact: An application may be able to cause a denial of service. Fix: Resolved via improved memory handling. Core Record CVE: CVE-2023-42873 Impact: An application may be able to access user-sensitive data. Fix: Resolved via log cleanup. FileProvider CVE: CVE-2023-42854 Impact: An application may be able to cause a denial of service to the Endpoint Security client. Fix: Resolved by removing vulnerable code. Find My CVE: CVE-2023-40413 Impact: An application may be able to read sensitive location information. Fix: Resolved via improved caching handling. Foundation CVE: CVE-2023-42844 Impact: A website may access sensitive user data when resolving symbolic links. Fix: Resolved via improved symbolic link handling. Ibc CVE: CVE-2023-40446 Impact: Processing maliciously crafted input may lead to arbitrary code execution in user-installed applications. Fix: Resolved via improved memory handling. ImageIO CVE: CVE-2023-40416 Impact: Processing images may lead to process memory leaks. Fix: Resolved via improved memory handling. IOTextEncryptionFamily CVE: CVE-2023-40423 Impact: An application may be able to execute arbitrary code with kernel privileges. Fix: Resolved via improved memory handling. Kernel CVE: CVE-2023-42849 Impact: An attacker who has already achieved kernel code execution may be able to bypass kernel memory mitigations. Fix: Resolved via improved memory handling. Model I/O CVE: CVE-2023-42856 Impact: Processing files may lead to unexpected application termination or arbitrary code execution. Fix: Resolved via improved memory handling. PackageKit CVE: CVE-2023-42859, CVE-2023-42877 Impact: An application may be able to modify protected parts of the filesystem. Fix: Resolved via improved checks. Pro Res CVE: CVE-2023-42873 Impact: An application may be able to execute arbitrary code with kernel privileges. Fix: Resolved via improved boundary checking. Sandbox CVE: CVE-2023-40429 Impact: An application with root privileges may be able to access private information. Fix: Resolved via improved private data redaction for log entries. SQLite CVE: CVE-2023-36191 Impact: A remote user may be able to cause a denial of service. Fix: Resolved via improved checks.

Goal Reached Thanks to every supporter — we hit 100%!

Apple Security Update Sep 2023 Vulnerability Summary (CVE-2023-42892 etc.)