First published: Mon Dec 11 2023(Updated: )
Accessibility. A privacy issue was addressed with improved private data redaction for log entries.
Credit: Eloi Benoist-Vanderbeken @elvanderb Synacktiv product-security@apple.com Noah Roskin-Frazee Pr Kirin @Pwnrin Mickey Jin @patch1t an anonymous researcher Marc Newlin SkySafeChristopher Reynolds Aymane Chabat Wojciech Regula SecuRingZhenjiang Zhao Pangu TeamQianxin Junsung Lee Meysam Firouzi @R00tkitSMM Michael DePlante @izobashi Trend Micro Zero Day InitiativePan ZhenPeng @Peterpan0927 STAR Labs SG PteCVE-2023-42893 ARJUN S D Csaba Fitzl @theevilbit OffSecAndrew Goldberg The McCombs School of BusinessThe University Texas at AustinZhongquan Li @Guluisacat Dawn Security Lab of JingDongCsaba Fitzl @theevilbit Offensive SecurityJoshua Jewett @JoshJewett33 Pwn2car Zoom Offensive Security Team Nan Wang @eternalsakura13 360 Vulnerability Research Instituterushikesh nandedkar SungKwon Lee (Demon.Team) Ivan Fratric Google Project Zero Trend Micro Zero Day InitiativeKoh M. Nakagawa @tsunek0h CVE-2023-38545 CVE-2023-38039 CVE-2023-38546 Yann GASCUEL Alter SolutionsAnthony Cruz Tyrant Corp @App CVE-2023-3618 CVE-2020-19185 CVE-2020-19186 CVE-2020-19187 CVE-2020-19188 CVE-2020-19189 CVE-2020-19190 Ron Masas BreakPointArsenii Kostromin (0x3c3e) Mattie Behrens Zhongquan Li @Guluisacat CVE-2023-5344 Don Clarke Clément Lecigne Google's Threat Analysis GroupYiğit Can YILMAZ @yilmazcanyigit Offensive Security Offensive SecurityYiğit Can YILMAZ @yilmazcanyigit Jewel Lambert rushikesh nandedka Zhipeng Huo @R3dF09 Tencent Security Xuanwu Lab
Affected Software | Affected Version | How to fix |
---|---|---|
Apple macOS | <14.2 | 14.2 |
tvOS | <17.2 | 17.2 |
Apple iOS, iPadOS, and watchOS | <10.2 | 10.2 |
macOS | <12.7.2 | 12.7.2 |
macOS Ventura | <13.6.3 | 13.6.3 |
Apple iOS and iPadOS | <17.2 | 17.2 |
Apple iOS, iPadOS, and macOS | <17.2 | 17.2 |
Apple iOS and iPadOS | <16.7.3 | 16.7.3 |
Apple iOS, iPadOS, and macOS | <16.7.3 | 16.7.3 |
Apple iOS, iPadOS, and macOS | <16.7.3 | |
Apple iOS, iPadOS, and macOS | >=17.0<17.2 | |
iPhone OS | <16.7.3 | |
iPhone OS | >=17.0<17.2 | |
macOS | >=12.0.0<12.7.2 | |
macOS | >=13.0<13.6.3 | |
macOS | >=14.0<14.2 | |
tvOS | <17.2 | |
Apple iOS, iPadOS, and watchOS | <10.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Appears in the following advisories)
(Found alongside the following vulnerabilities)
CVE-2023-42914 is categorized with high severity due to potential memory handling issues in the kernel.
To address CVE-2023-42914, update to the latest versions of affected Apple products, including iOS 17.2 and macOS Sonma 14.2.
CVE-2023-42914 affects multiple Apple products including iOS, iPadOS, macOS Monterey, macOS Ventura, macOS Sonoma, watchOS, and tvOS.
iOS versions prior to 17.2, including iOS 16.7.3, are vulnerable to CVE-2023-42914.
There are no known workarounds for CVE-2023-42914; the best approach is to apply the latest software updates.