macOS · macOS update · March 7, 2024
Ventura 13.6.5
Ventura 13.6.5, released March 7, 2024, fixes 30 CVEs in Ventura. One of them is being exploited (CVE-2024-23225); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.
Patch now1 on CISA KEVUnsupported product
CVEs closed
30
2 rated Critical
Exploited
1
CVE-2024-23225
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0148
74th percentile
Priority of the 30 CVEs
Patch now 1
Urgent 2
High 8
Routine 19
Applies to
| Product | Version |
|---|---|
| Ventura | 13.6.5 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2024-23225 | Kernel: An attacker with arbitrary kernel read and write capability may be able to bypass kernel memory protections. Apple is aware of a report that this issue may have been exploited. | An attacker with arbitrary kernel read and write capability may be able to bypass kernel memory protections. Apple is aware of a report that this issue may have been exploited. | 7.8 | 0.0148 | KEVExploited |
| Urgent | CVE-2024-23286 | ImageIO: Processing an image may lead to arbitrary code execution | Processing an image may lead to arbitrary code execution | 9.8 | 0.0124 | None reported |
| Urgent | CVE-2024-23265 | Kernel: An app may be able to cause unexpected system termination or write kernel memory | An app may be able to cause unexpected system termination or write kernel memory | 9.8 | 0.0072 | None reported |
| High | CVE-2024-23203 | Shortcuts: A shortcut may be able to use sensitive data with certain actions without prompting the user | A shortcut may be able to use sensitive data with certain actions without prompting the user | 7.5 | 0.0091 | None reported |
| High | CVE-2024-23278 | libxpc: An app may be able to break out of its sandbox | An app may be able to break out of its sandbox | 7.7 | 0.0049 | None reported |
| High | CVE-2024-23274 | PackageKit: An app may be able to elevate privileges | An app may be able to elevate privileges | 8.4 | 0.0042 | None reported |
| High | CVE-2024-23247 | ColorSync: Processing a file may lead to unexpected app termination or arbitrary code execution | Processing a file may lead to unexpected app termination or arbitrary code execution | 7.8 | 0.0038 | None reported |
| High | CVE-2024-23276 | Admin Framework: An app may be able to elevate privileges | An app may be able to elevate privileges | 8.4 | 0.0028 | None reported |
| High | CVE-2024-23270 | Image Processing: An app may be able to execute arbitrary code with kernel privileges | An app may be able to execute arbitrary code with kernel privileges | 7.8 | 0.0028 | None reported |
| High | CVE-2024-23234 | Intel Graphics Driver: An app may be able to execute arbitrary code with kernel privileges | An app may be able to execute arbitrary code with kernel privileges | 7.8 | 0.0026 | None reported |
| High | CVE-2024-23299 | Disk Images: An app may be able to break out of its sandbox | An app may be able to break out of its sandbox | 8.6 | 0.0024 | None reported |
| Routine | CVE-2024-23218 | CoreCrypto: An attacker may be able to decrypt legacy RSA PKCS#1 v1.5 ciphertexts without having the private key | An attacker may be able to decrypt legacy RSA PKCS#1 v1.5 ciphertexts without having the private key | 5.9 | 0.0099 | None reported |
| Routine | CVE-2024-23264 | Metal: An application may be able to read restricted memory | An application may be able to read restricted memory | 5.3 | 0.0080 | None reported |
| Routine | CVE-2024-23257 | ImageIO: Processing an image may result in disclosure of process memory | Processing an image may result in disclosure of process memory | 3.3 | 0.0045 | None reported |
| Routine | CVE-2024-23245 | Shortcuts: Third-party shortcuts may use a legacy action from Automator to send events to apps without user consent | Third-party shortcuts may use a legacy action from Automator to send events to apps without user consent | 5.4 | 0.0043 | None reported |
| Routine | CVE-2024-23217 | Shortcuts: An app may be able to bypass certain Privacy preferences | An app may be able to bypass certain Privacy preferences | 3.3 | 0.0038 | None reported |
| Routine | CVE-2024-23229 | Find My: A malicious application may be able to access Find My data | A malicious application may be able to access Find My data | 5.5 | 0.0028 | None reported |
| Routine | CVE-2024-23216 | PackageKit: An app may be able to overwrite arbitrary files | An app may be able to overwrite arbitrary files | 6.7 | 0.0027 | None reported |
| Routine | CVE-2024-23231 | Share Sheet: An app may be able to access user-sensitive data | An app may be able to access user-sensitive data | 3.3 | 0.0027 | None reported |
| Routine | CVE-2024-23283 | Notes: An app may be able to access user-sensitive data | An app may be able to access user-sensitive data | 6.2 | 0.0026 | None reported |
| Routine | CVE-2023-28826 | MediaRemote: An app may be able to access sensitive user data | An app may be able to access sensitive user data | 5.5 | 0.0026 | None reported |
| Routine | CVE-2024-23201 | libxpc: An app may be able to cause a denial-of-service | An app may be able to cause a denial-of-service | 6.2 | 0.0025 | None reported |
| Routine | CVE-2024-23227 | Airport: An app may be able to read sensitive location information | An app may be able to read sensitive location information | 6.2 | 0.0025 | None reported |
| Routine | CVE-2024-23269 | AppleMobileFileIntegrity: An app may be able to modify protected parts of the file system | An app may be able to modify protected parts of the file system | 6.2 | 0.0025 | None reported |
| Routine | CVE-2024-23272 | Storage Services: A user may gain access to protected parts of the file system | An attacker may gain access to protected parts of the file system | 5.5 | 0.0024 | None reported |
Showing 1 to 25 of 30
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.