First published: Thu May 18 2023(Updated: )
A logic issue was addressed with improved state management. This issue is fixed in iOS 15.7.6 and iPadOS 15.7.6, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. An app may be able to modify protected parts of the file system.
Credit: Arsenii Kostromin (0x3c3e) Arsenii Kostromin (0x3c3e) Arsenii Kostromin (0x3c3e) Arsenii Kostromin (0x3c3e) product-security@apple.com product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
<13.4 | 13.4 | |
<12.6.6 | 12.6.6 | |
Apple macOS Big Sur | <11.7.7 | 11.7.7 |
Apple iOS | <15.7.6 | 15.7.6 |
Apple iPadOS | <15.7.6 | 15.7.6 |
Apple iPadOS | <15.7.6 | |
Apple iPhone OS | <15.7.6 | |
Apple macOS | >=11.0<11.7.7 | |
Apple macOS | >=12.0<12.6.6 | |
Apple macOS | >=13.0<13.4 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2023-32397 is a vulnerability in iOS, iPadOS, macOS Big Sur, macOS Monterey, and macOS Ventura that allows an app to modify protected parts of the file system.
CVE-2023-32397 has a severity score of 7.5, indicating a high severity.
CVE-2023-32397 affects iOS versions up to but excluding 15.7.6, iPadOS versions up to but excluding 15.7.6, macOS Big Sur versions up to but excluding 11.7.7, macOS Monterey versions up to but excluding 12.6.6, and macOS Ventura versions up to but excluding 13.4.
To fix CVE-2023-32397, update to iOS 15.7.6 or later, iPadOS 15.7.6 or later, macOS Big Sur 11.7.7 or later, macOS Monterey 12.6.6 or later, or macOS Ventura 13.4 or later.
You can find more information about CVE-2023-32397 on the Apple support website: [link](https://support.apple.com/en-us/HT213758) [link](https://support.apple.com/en-us/HT213759) [link](https://support.apple.com/en-us/HT213760).