CVE-2023-38601
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk43th percentile - higher than 43% of all known CVEs
Summary
This issue was addressed by removing the vulnerable code. An app may be able to modify protected parts of the file system.
Risk Assessment
The ability to modify protected areas of the file system may lead to unauthorized changes and security breaches.
Recommendation
It is recommended to update to macOS Big Sur 11.7.9, macOS Monterey 12.6.8, or macOS Ventura 13.5 to mitigate this vulnerability.
Other vulnerabilities in macOS
See all- CVE-2026-39870High
The issue was addressed with improved memory handling. Exploitation of this vulnerability may lead to process memory corruption when processing a maliciously crafted image.
- CVE-2026-28915High
A parsing issue in the handling of directory paths was addressed with improved path validation. An app may be able to gain root privileges.
- CVE-2026-65400CriticalActively exploited
An authentication issue was addressed with improved state management. This issue affects macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, and macOS Tahoe 26.6.1. A network attacker may be able to authenticate to Screen Sharing without valid credentials.
- CVE-2026-43773Critical
An out-of-bounds read was fixed with improved bounds checking. Fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory.
- CVE-2026-43764Critical
An integer overflow was addressed with improved input validation. An app may cause unexpected system termination.
- CVE-2026-43750Critical
A buffer overflow in macOS allows an app to execute arbitrary code out of its sandbox or with elevated privileges. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6.
- CVE-2026-43748Critical
An out-of-bounds write issue in macOS may cause unexpected system termination by an app. This is fixed in macOS Sequoia 15.7.8 and macOS Tahoe 26.6.
- CVE-2026-43710Critical
Vulnerability in macOS (Sequoia, Sonoma, Tahoe) allowing an attacker to cause unexpected system termination or corrupt kernel memory. Fixed with improved memory handling.
- CVE-2026-43694Critical
Vulnerability in macOS (Sequoia, Sonoma, Tahoe) allowing an app to cause unexpected system termination or write kernel memory. Fixed with improved memory handling.
- CVE-2026-43682Critical
Vulnerability in macOS (Sequoia, Sonoma, Tahoe) allowing a remote user to cause unexpected system termination or corrupt kernel memory. Fixed with improved memory handling.
Original NVD description (English source)
This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Big Sur 11.7.9, macOS Monterey 12.6.8, macOS Ventura 13.5. An app may be able to modify protected parts of the file system.