CVE-2023-38580
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Jul 27, 2023
Updated: Aug 3, 2023
Summary
CVE-2023-38580 is a vulnerability affecting multiple Apple operating systems, including iOS 16 and iPadOS 16, macOS Ventura, and watchOS 9. An app can exploit this issue to execute arbitrary code with kernel privileges due to insufficient memory handling. The vulnerability has been addressed in the latest updates for each respective operating system: iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5, and watchOS 9.6.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Apple (iPhone OS)
- Apple Watch
- iPadOS
- MacOS
- WatchOS
Affected Vendors
- Apple