- 157/2023
- High
Apple has released a security update to fix a zero-day vulnerability affecting macOS Ventura, and Safari.
The addressed vulnerability could allow the remote attacker to gain access, and execute arbitrary code on the affected system by persuading the victim to visit a specially crafted website.
The addressed vulnerability:
Apple iOS, iPadOS, and macOS Ventura Code Execution (CVE-2023-37450):
- CVSS: 8.8
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: Required
- Consequences: Gain Access
Vulnerabilities
CVE-2023-37450
Mitigations
The enterprise should deploy this patch as soon as the testing phase is completed.
Apple Security Advisory