macOS Sequoia 15.5 Security Update Vulnerability List (CVE-2023-28496 to CVE-2023-31306)

Critical Vulnerability Information macOS Sequoia 15.5 CVE-2023-28496: AppleScript - Connecting to a macOS AFP server may lead to kernel memory corruption. CVE-2023-31272: AppleScript - A maliciously crafted AFP network share may cause system termination. CVE-2023-31273: Apple Intelligence Reports - Access tokens may allow access to sensitive user data. CVE-2023-31274: AppleJPEG - Processing maliciously crafted files may result in unexpected application termination or memory corruption. CVE-2023-31275: Audio - A double-free issue may lead to unexpected system termination. CVE-2023-31276: BOM - Processing maliciously crafted files may result in unexpected application termination or memory corruption. CVE-2023-31277: CoreBluetooth - A memory leak issue may allow access to sensitive user data. CVE-2023-31278: CoreAudio - Processing maliciously crafted files may result in unexpected application termination or memory corruption. CVE-2023-31279: CoreMedia - A logic issue may lead to unexpected application termination. CVE-2023-31280: CoreMedia - A logic issue may lead to unexpected application termination or memory corruption. CVE-2023-31281: Finder - An information disclosure issue has been resolved with improved privacy controls. CVE-2023-31282: Found In Apps - A logic issue may allow access to sensitive user data. CVE-2023-31283: ImageIO - Processing maliciously crafted image files may lead to denial of service. CVE-2023-31284: Installer - A sandbox bypass issue may allow access to sensitive user data. CVE-2023-31285: Kernel - A memory corruption issue may lead to unexpected system termination or memory corruption. CVE-2023-31286: Libdispatch - A logic issue may allow bypassing ASLR. CVE-2023-31287: Mobile Device Service - A logic issue may allow gaining root privileges. CVE-2023-31288: NetworkExtension - A logic issue may allow observation of new network connections. CVE-2023-31289: Notes - A logic issue may lead to deletion of user’s note data. CVE-2023-31290: Notification Center - A logic issue may allow access to sensitive user data. CVE-2023-31291: OpenSSH - Multiple vulnerabilities affect OpenSSH. CVE-2023-31292: Pro Res - A memory corruption issue may lead to unexpected system termination or memory corruption. CVE-2023-31293: Prefs - A logic issue may lead to unexpected system termination. CVE-2023-31294: quarantine - A logic issue may allow sandbox bypass. CVE-2023-31295: RemoteViewServices - A logic issue may allow sandbox bypass. CVE-2023-31296: Sandbox - A logic issue may allow access to sensitive user data. CVE-2023-31297: Security - An integer overflow may lead to memory corruption. CVE-2023-31298: SharedFileList - A logic issue may allow privilege escalation. CVE-2023-31299: SoftwareUpdate - A logic issue may allow privilege escalation. CVE-2023-31300: StoreKit - A logic issue may allow access to sensitive user data. CVE-2023-31301: TCC - A logic issue may allow access to sensitive user data. CVE-2023-31302: Weather - A logic issue may allow access to sensitive location information. CVE-2023-31303: WebKit - Processing maliciously crafted web content may lead to memory corruption. CVE-2023-31304: WebKit - Processing maliciously crafted web content may lead to unexpected process crashes. CVE-2023-31305: WebKit - A type confusion issue has been resolved with improved state handling. CVE-2023-31306: WebKit - Processing maliciously crafted web content may lead to unexpected Safari crashes. CVE-2023-31307: WebKit - A malicious website may exploit data cross-origin. CVE-2023-31308: WebKit - Processing maliciously crafted web content may lead to unexpected Safari crashes.

Goal Reached Thanks to every supporter — we hit 100%!

macOS Sequoia 15.5 Security Update Vulnerability List (CVE-2023-28496 to CVE-2023-31306)