CVE-2023-23499
First published: Mon Jan 23 2023(Updated: )
AppleMobileFileIntegrity. This issue was addressed by enabling hardened runtime.
Credit: Wojciech Regula SecuRingWojciech Reguła @_r3ggi SecuRingWojciech Reguła @_r3ggi SecuRingWojciech Reguła @_r3ggi SecuRingWojciech Reguła @_r3ggi SecuRingWojciech Reguła @_r3ggi SecuRing product-security@apple.com product-security@apple.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apple iPadOS | <16.3 | |
| Apple iPhone OS | <16.3 | |
| Apple macOS | >=11.0<11.7.3 | |
| Apple macOS | >=12.0.0<12.6.3 | |
| Apple macOS | >=13.0<13.2 | |
| Apple tvOS | <16.3 | |
| Apple watchOS | <9.3 | |
| Apple macOS Big Sur | <11.7.3 | 11.7.3 |
| <13.2 | 13.2 | |
| <16.3 | 16.3 | |
| <12.6.3 | 12.6.3 | |
| <16.3 | 16.3 | |
| <16.3 | 16.3 | |
| Apple watchOS | <9.3 | 9.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://support.apple.com/en-us/HT213599 (Advisory)
- https://support.apple.com/en-us/HT213601 (Advisory)
- https://support.apple.com/en-us/HT213603 (Advisory)
- https://support.apple.com/en-us/HT213604 (Advisory)
- https://support.apple.com/en-us/HT213605 (Advisory)
- https://support.apple.com/en-us/HT213606 (Advisory)
- https://support.apple.com/kb/HT213599
- https://support.apple.com/kb/HT213606
- https://support.apple.com/kb/HT213601
- https://support.apple.com/kb/HT213605
- https://support.apple.com/kb/HT213603
- https://support.apple.com/kb/HT213604
Parent vulnerabilities
(Appears in the following advisories)
Peer vulnerabilities
(Found alongside the following vulnerabilities)
- CVE-2023-23499
- CVE-2022-35252
- CVE-2023-23513
- CVE-2023-23516
- CVE-2022-42834
- CVE-2023-23497
- CVE-2023-23505
- CVE-2023-27931
- CVE-2023-23518
- CVE-2023-23517
- CVE-2023-23508
- CVE-2023-32438
- CVE-2023-23520
- CVE-2022-42915
- CVE-2022-42916
- CVE-2022-32221
- CVE-2022-35260
- CVE-2023-23539
- CVE-2023-23493
- CVE-2023-41990
- CVE-2023-23530
- CVE-2023-23531
- CVE-2023-23519
- CVE-2023-23507
- CVE-2023-23500
- CVE-2023-23502
- CVE-2023-23504
- CVE-2023-23506
- CVE-2023-23498
- CVE-2023-23503
- CVE-2023-28208
- CVE-2023-23510
- CVE-2023-23512
- CVE-2022-3705
- CVE-2023-23511
- CVE-2023-32393
- CVE-2023-23496
- CVE-2023-23501
- CVE-2022-0108
- CVE-2022-32915
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2023-23499.
What is the severity of CVE-2023-23499?
The severity of CVE-2023-23499 is medium.
How was this issue addressed?
This issue was addressed by enabling hardened runtime.
Which software versions are affected by CVE-2023-23499?
CVE-2023-23499 affects macOS Big Sur 11.0 to 11.7.3, macOS Monterey 12.0.0 to 12.6.3, watchOS up to 9.3, tvOS up to 16.3, iOS up to 16.3, and iPadOS up to 16.3.
How can I fix CVE-2023-23499?
To fix CVE-2023-23499, update to macOS Big Sur 11.7.3, macOS Monterey 12.6.3, watchOS 9.3, tvOS 16.3, iOS 16.3, or iPadOS 16.3.
- agent/type
- agent/first-publish-date
- collector/nvd-api
- agent/software-canonical-lookup-request
- collector/nvd-index
- agent/author
- agent/severity
- agent/softwarecombine
- agent/description
- agent/event
- collector/apple-support
- source/Apple
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/references
- agent/tags
- vendor/apple
- canonical/apple ipados
- canonical/apple iphone os
- canonical/apple macos
- version/apple macos/11.0
- version/apple macos/12.0.0
- version/apple macos/13.0
- canonical/apple tvos
- canonical/apple watchos
- canonical/apple macos big sur