Apple Security Updates – 25 July 2023

By /
  • 177/2023
  • High

Apple has released security updates to address several vulnerabilities across multiple products.

The addressed vulnerabilities could allow the attacker to execute arbitrary code, perform denial of service attacks, bypass security restrictions, obtain sensitive information, gain elevated privileges, or gain access to the affected systems by persuading the victim to visit a specially crafted website.

Sample of the addressed vulnerabilities:

1. Apple macOS Ventura Code Execution Vulnerability (CVE-2023-38597):

  • CVSS: 8.8
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: Required
  • Consequences: Gain Access

2. Apple macOS Ventura Denial of Service Vulnerability (CVE-2023-38603):

  • CVSS: 7.5
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Denial of Service

Sample of affected products:

  • Apple macOS Ventura 13.4.
  • Apple macOS Big Sur 11.7.8.
  • Apple Safari 16.5.2.
  • Apple macOS Monterey 12.6.7.

It should be highlighted that Apple is aware of a zero-day vulnerability “CVE-2023- 38606” found in the kernel, which has been actively exploited in the wild.

Vulnerabilities

Apple Security Advisory

Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Apple Security Advisory

References

Apple Security Advisory