A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.6.6, macOS Big Sur 11.7.7, macOS Ventura 13.4. Parsing an office document may lead to an unexpected app termination or arbitrary code execution.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Accessibility | — | — | Oct 14, 2024 | Jan 10, 2024 |
| Apple Osx Accounts | — | — | Oct 14, 2024 | Jan 10, 2024 |
| Apple Osx Amd | — | — | Oct 14, 2024 | Jan 10, 2024 |
| Apple Osx Applemobilefileintegrity | — | — | Oct 14, 2024 | Jan 10, 2024 |
| Apple Osx Associateddomains | — | — | Oct 14, 2024 | Jan 10, 2024 |
| Apple Osx Contacts | — | — | Oct 14, 2024 | Jan 10, 2024 |
| Apple Osx Corelocation | — | — | Oct 14, 2024 | Jan 10, 2024 |
| Apple Osx Coreservices | — | — | Oct 14, 2024 | Jan 10, 2024 |
| Apple Osx Cups | — | — | Oct 14, 2024 | Jan 10, 2024 |
| Apple Osx Dcerpc | — | — | Oct 14, 2024 | Jan 10, 2024 |
| Apple Osx Desktopservices | — | — | Oct 14, 2024 | Jan 10, 2024 |
| Apple Osx Facegallery | — | — | Oct 14, 2024 | Jan 10, 2024 |
| Apple Osx Geoservices | — | — | Oct 14, 2024 | Jan 10, 2024 |
| Apple Osx Imageio | — | — | Oct 14, 2024 | Jan 10, 2024 |
| Apple Osx Iosurface | — | — | Oct 14, 2024 | Jan 10, 2024 |
| Apple Osx Iosurfaceaccelerator | — | — | Oct 14, 2024 | Jan 10, 2024 |
| Apple Osx Kernel | — | — | Oct 14, 2024 | Jan 10, 2024 |
| Apple Osx Launchservices | — | — | Oct 14, 2024 | Jan 10, 2024 |
| Apple Osx Libxml2 | — | — | Oct 14, 2024 | Jan 10, 2024 |
| Apple Osx Libxpc | — | — | Oct 14, 2024 | Jan 10, 2024 |
| Apple Osx Mallocstacklogging | — | — | Oct 14, 2024 | Jan 10, 2024 |
| Apple Osx Metal | — | — | Oct 14, 2024 | Jan 10, 2024 |
| Apple Osx Mobilestoragemounter | — | — | Oct 14, 2024 | Jan 10, 2024 |
| Apple Osx Modelio | — | — | Oct 14, 2024 | Jan 10, 2024 |
| Apple Osx Networkextension | — | — | Oct 14, 2024 | Jan 10, 2024 |
| Apple Osx Nsurlsession | — | — | Oct 14, 2024 | Jan 10, 2024 |
| Apple Osx Packagekit | — | — | Oct 14, 2024 | Jan 10, 2024 |
| Apple Osx Pdfkit | — | — | Oct 14, 2024 | Jan 10, 2024 |
| Apple Osx Perl | — | — | Oct 14, 2024 | Jan 10, 2024 |
| Apple Osx Photos | — | — | Oct 14, 2024 | Jan 10, 2024 |
| Apple Osx Quicklook | — | Upgrade macOS to the latest version | Dec 22, 2023 | Dec 22, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub