CVE-2023-34425
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk62th percentile - higher than 62% of all known CVEs
Summary
The issue concerns improper memory handling, which may allow an app to execute arbitrary code with kernel privileges. It has been fixed in several versions of Apple operating systems.
Risk Assessment
Exploitation of this vulnerability could lead to serious security breaches, allowing attackers to gain full control over the system.
Recommendation
It is recommended to update to the latest versions of the operating systems to protect against this vulnerability.
Original NVD description (English source)
The issue was addressed with improved memory handling. This issue is fixed in watchOS 9.6, macOS Monterey 12.6.8, iOS 15.7.8 and iPadOS 15.7.8, macOS Big Sur 11.7.9, iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. An app may be able to execute arbitrary code with kernel privileges.