CVE-2023-32383
High
Description
This issue was addressed by forcing hardened runtime on the affected binaries at the system level. This issue is fixed in macOS Monterey 12.6.6, macOS Big Sur 11.7.7, macOS Ventura 13.4. An app may be able to inject code into sensitive binaries bundled with Xcode.
SeverityHigh
CVSS7.8
Exploit probability—
Product
Apple Macos
PublishedJan 10, 2024
First seenJan 10, 2024
Weakness typeCWE-94Code injection
How to fix
Update
- apple macos11.7.7, 12.6.6, 13.4 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple macos | v < 11.7.7, 12.0.0 ≤ v < 12.6.6, 13.0 ≤ v < 13.4 | 11.7.7, 12.6.6, 13.4 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.