Apple Security Updates – 22 September 2023

The addressed vulnerabilities could allow the attacker to gain access, elevate the privilege, and bypass security restrictions on the affected products by persuading the victim to open a specially crafted web content or application.

Sample of the addressed vulnerabilities:

1. Apple Safari WebKit Code Execution Vulnerability (CVE-2023-41993):

• CVSS: 8.8
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: None
• User Interaction: Required
• Consequences: Gain Access

2. Apple macOS Ventura Privilege Escalation Vulnerability (CVE-2023-41992):

• CVSS: 7.8
• Attack Vector: Local
• Attack Complexity: Low
• Privileges Required: None
• User Interaction: Required
• Consequences: Gain Privileges

It should be highlighted that security researchers have discovered that these zeroday vulnerabilities are actively exploited in the wild.