Rapid7

vulnerability

OS X update for BOM (CVE-2023-42876)

Severity
6
CVSS
(AV:L/AC:M/Au:N/C:C/I:N/A:C)
Published
Dec 27, 2023
Added
Dec 27, 2023
Modified
Mar 27, 2026

Description

The issue was addressed with improved bounds checks. This issue is fixed in macOS Sonoma 14. Processing a file may lead to a denial-of-service or potentially disclose memory contents.

Solution

apple-osx-upgrade-14
Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.