Rewterz Threat Alert – CVE-2023-38606 – Apple macOS, iOS and iPadOS Vulnerability Exploited in the Wild

Severity

Medium

Analysis Summary

CVE-2023-38606

Apple macOS, iOS and iPadOS could allow a local attacker to bypass security restrictions, caused by a flaw in the Kernel module. By using a specially crafted application, an attacker could exploit this vulnerability to modify sensitive kernel state.

Impact

• Security Bypass

Indicators Of Compromise

CVE

• CVE-2023-22023

Affected Vendors

Apple

Affected Products

• Apple iOS 16.5.1
• Apple iPadOS 16.5.1
• Apple macOS Ventura 13.4.1
• Apple iOS 15.7.7

Remediation

Refer to Apple security document for patch, upgrade or suggested workaround information

Apple iOS 16.6 and Apple iPadOS 16.6

Apple macOS Ventura 13.5

Apple iOS 15.7.8

Apple macOS Monterey 12.6.8