macOS
macOS 13.6.7
Official advisory22 CVEs fixed by this release.
- Release date
- 2024-05-13
- End of support
- 2025-09-15 EOL
- CVEs fixed
- 22
- CISA KEV
- 1
- Critical
- 0
- High
- 0
- NVD pending
- 22
CVEs fixed
| CVE | Severity | KEV | Published | Description |
|---|---|---|---|---|
|
CVE-2024-23296
KEV
[Apple RTKit] An attacker with arbitrary kernel read and write capability may be able to bypass kernel memory protectio… |
N/A | KEV | [Apple RTKit] An attacker with arbitrary kernel read and write capability may be able to bypass kernel memory protections. Apple is aware of a report that this… | |
|
CVE-2023-42861
[Apple AVEVideoEncoder] An attacker with knowledge of a standard user's credentials can unlock another standard user's … |
N/A | — | [Apple AVEVideoEncoder] An attacker with knowledge of a standard user's credentials can unlock another standard user's locked screen on the same Mac | |
|
CVE-2024-27789
[Apple Foundation] An app may be able to access user-sensitive data |
N/A | — | [Apple Foundation] An app may be able to access user-sensitive data | |
|
CVE-2024-27796
[Apple AVEVideoEncoder] A user may be able to elevate privileges |
N/A | — | [Apple AVEVideoEncoder] A user may be able to elevate privileges | |
|
CVE-2024-27798
[Apple AVEVideoEncoder] A user may be able to elevate privileges |
N/A | — | [Apple AVEVideoEncoder] A user may be able to elevate privileges | |
|
CVE-2024-27799
[Apple AVEVideoEncoder] An unprivileged app may be able to log keystrokes in other apps including those using secure in… |
N/A | — | [Apple AVEVideoEncoder] An unprivileged app may be able to log keystrokes in other apps including those using secure input mode | |
|
CVE-2024-27800
[Apple AVEVideoEncoder] Processing a maliciously crafted message may lead to a denial-of-service |
N/A | — | [Apple AVEVideoEncoder] Processing a maliciously crafted message may lead to a denial-of-service | |
|
CVE-2024-27802
[Apple AVEVideoEncoder] Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code … |
N/A | — | [Apple AVEVideoEncoder] Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution | |
|
CVE-2024-27805
[Apple AVEVideoEncoder] An app may be able to access sensitive user data |
N/A | — | [Apple AVEVideoEncoder] An app may be able to access sensitive user data | |
|
CVE-2024-27806
[Apple AVEVideoEncoder] An app may be able to access sensitive user data |
N/A | — | [Apple AVEVideoEncoder] An app may be able to access sensitive user data | |
|
CVE-2024-27810
[Apple AVEVideoEncoder] An app may be able to read sensitive location information |
N/A | — | [Apple AVEVideoEncoder] An app may be able to read sensitive location information | |
|
CVE-2024-27817
[Apple AVEVideoEncoder] An app may be able to execute arbitrary code with kernel privileges |
N/A | — | [Apple AVEVideoEncoder] An app may be able to execute arbitrary code with kernel privileges | |
|
CVE-2024-27823
[Apple AVEVideoEncoder] An attacker in a privileged network position may be able to spoof network packets |
N/A | — | [Apple AVEVideoEncoder] An attacker in a privileged network position may be able to spoof network packets | |
|
CVE-2024-27824
[Apple AVEVideoEncoder] An app may be able to elevate privileges |
N/A | — | [Apple AVEVideoEncoder] An app may be able to elevate privileges | |
|
CVE-2024-27827
[Apple AVEVideoEncoder] An app may be able to read arbitrary files |
N/A | — | [Apple AVEVideoEncoder] An app may be able to read arbitrary files | |
|
CVE-2024-27831
[Apple AVEVideoEncoder] Processing a file may lead to unexpected app termination or arbitrary code execution |
N/A | — | [Apple AVEVideoEncoder] Processing a file may lead to unexpected app termination or arbitrary code execution | |
|
CVE-2024-27840
[Apple AVEVideoEncoder] An attacker that has already achieved kernel code execution may be able to bypass kernel memory… |
N/A | — | [Apple AVEVideoEncoder] An attacker that has already achieved kernel code execution may be able to bypass kernel memory protections | |
|
CVE-2024-27843
[Apple AVEVideoEncoder] An app may be able to elevate privileges |
N/A | — | [Apple AVEVideoEncoder] An app may be able to elevate privileges | |
|
CVE-2024-27847
[Apple AVEVideoEncoder] An app may be able to bypass Privacy preferences |
N/A | — | [Apple AVEVideoEncoder] An app may be able to bypass Privacy preferences | |
|
CVE-2024-27855
[Apple AVEVideoEncoder] A shortcut may be able to use sensitive data with certain actions without prompting the user |
N/A | — | [Apple AVEVideoEncoder] A shortcut may be able to use sensitive data with certain actions without prompting the user | |
|
CVE-2024-27885
[Apple AVEVideoEncoder] An app may be able to modify protected parts of the file system |
N/A | — | [Apple AVEVideoEncoder] An app may be able to modify protected parts of the file system | |
|
CVE-2024-40771
[Apple AVEVideoEncoder] An app may be able to execute arbitrary code with kernel privileges |
N/A | — | [Apple AVEVideoEncoder] An app may be able to execute arbitrary code with kernel privileges |