CVE-2023-38606

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Jul 27, 2023
Updated: Aug 1, 2023

Summary

CVE-2023-38606 is a vulnerability affecting multiple Apple operating systems, including macOS Monterey, iOS, iPadOS, tvOS, and macOS Big Sur. The issue involves improper state management, which allows an app to manipulate sensitive kernel state. Apple has released patches for macOS Monterey 12.6.8, iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Big Sur 11.7.9, and macOS Ventura 13.5 to address this vulnerability. Notably, Apple has reported that this issue was being actively exploited in versions of iOS released before 15.7.1.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share