Apple macOS Sequoia 15.7 Security Update: List of CVEs (RCE/LPE) in Kernel, CoreMedia, and Components

Critical Vulnerability Information Vulnerability Overview Release Date: September 12, 2023 Version: macOS Sequoia 15.7 Main Vulnerability Categories and Descriptions Security Updates Apple - CVE-2023-38642: May allow an application to execute arbitrary code. - CVE-2023-38643: May allow an application to obtain sensitive information. Kernel-Related Kernel - CVE-2023-38644: May allow a local user to execute arbitrary code via specially crafted files. Applications and Services Apple Online Store Kit - CVE-2023-38645: May allow a remote attacker to execute arbitrary code. AppleSandbox - CVE-2023-38646: May allow an application to bypass security restrictions. ATS - CVE-2023-38647: May allow a remote attacker to execute arbitrary code. CoreMedia - CVE-2023-38648: May allow a remote attacker to execute arbitrary code. CryptoKit - CVE-2023-38649: May allow a remote attacker to execute arbitrary code. DeviceServices - CVE-2023-38650: May allow a remote attacker to execute arbitrary code. GPU Drivers - CVE-2023-38651: May allow a remote attacker to execute arbitrary code. IOMobileFramebuffer - CVE-2023-38652: May allow a local user to execute arbitrary code. Kernel - CVE-2023-38653: May allow a local user to execute arbitrary code. Libc - CVE-2023-38654: May allow a remote attacker to execute arbitrary code. Libinfo - CVE-2023-38655: May allow a remote attacker to execute arbitrary code. MetalLibrary - CVE-2023-38656: May allow a remote attacker to execute arbitrary code. MigNetworkKit - CVE-2023-38657: May allow a remote attacker to execute arbitrary code. ModelIOComputation - CVE-2023-38658: May allow a remote attacker to execute arbitrary code. Notification Center - CVE-2023-38659: May allow a remote attacker to execute arbitrary code. PackageKit - CVE-2023-38660: May allow a remote attacker to execute arbitrary code. Perl - CVE-2023-38661: May allow a remote attacker to execute arbitrary code. Ruby - CVE-2023-38662: May allow a remote attacker to execute arbitrary code. ScreenCapture - CVE-2023-38663: May allow a remote attacker to execute arbitrary code. Security Foundation - CVE-2023-38664: May allow a remote attacker to execute arbitrary code. SharedFileList - CVE-2023-38665: May allow a remote attacker to execute arbitrary code. SharedMIMEInfo - CVE-2023-38666: May allow a remote attacker to execute arbitrary code. SharedWebCred - CVE-2023-38667: May allow a remote attacker to execute arbitrary code. ShellScript - CVE-2023-38668: May allow a remote attacker to execute arbitrary code. SimpleHTTP - CVE-2023-38669: May allow a remote attacker to execute arbitrary code. SlowKeyCF - CVE-2023-38670: May allow a remote attacker to execute arbitrary code. SlowKeyUI - CVE-2023-38671: May allow a remote attacker to execute arbitrary code. SoundServer - CVE-2023-38672: May allow a remote attacker to execute arbitrary code. Touch Bar - CVE-2023-38673: May allow a remote attacker to execute arbitrary code. TouchBar Control Strip - CVE-2023-38674: May allow a remote attacker to execute arbitrary code. WindowServer - CVE-2023-38675: May allow a remote attacker to execute arbitrary code. Additional Information Acknowledgments: Includes thanks to individuals and organizations who discovered and reported these vulnerabilities.

Goal Reached Thanks to every supporter — we hit 100%!

Apple macOS Sequoia 15.7 Security Update: List of CVEs (RCE/LPE) in Kernel, CoreMedia, and Components