First published: Mon Mar 27 2023(Updated: )
A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Studio Display Firmware Update 16.4. An app may be able to execute arbitrary code with kernel privileges
Credit: Proteas Pangu LabProteas Pangu Lab product-security@apple.com product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
Apple macOS Ventura | <13.3 | 13.3 |
Apple Studio Display Firmware Update | <16.4 | 16.4 |
Apple macOS | >=13.0<13.3 | |
Apple Studio Display Firmware | <16.4 | |
Apple Studio Display |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2023-27965 is a memory corruption issue in macOS Ventura and Studio Display Firmware Update that allows an app to execute arbitrary code with kernel privileges.
CVE-2023-27965 is fixed in macOS Ventura 13.3 and Studio Display Firmware Update 16.4.
CVE-2023-27965 has a severity rating of 7.8 (high).
CVE-2023-27965 is associated with CWE-787.
You can find more information about CVE-2023-27965 on the Apple website at the following links: [support.apple.com/en-us/HT213672](support.apple.com/en-us/HT213672) and [support.apple.com/en-us/HT213670](support.apple.com/en-us/HT213670).