Vulnerabilities > Apple > Macos > 14.1.2

DATE CVE VULNERABILITY TITLE RISK
2023-12-18 CVE-2023-48795 Improper Validation of Integrity Check Value vulnerability in multiple products
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack.
5.9
2023-12-12 CVE-2023-42874 Unspecified vulnerability in Apple Macos
This issue was addressed with improved state management.
low complexity
apple
2.4
2023-12-12 CVE-2023-42882 Out-of-bounds Write vulnerability in Apple Macos
The issue was addressed with improved memory handling.
local
low complexity
apple CWE-787
7.8
2023-12-12 CVE-2023-42883 The issue was addressed with improved memory handling.
local
low complexity
apple debian
5.5
2023-12-12 CVE-2023-42884 Unspecified vulnerability in Apple products
This issue was addressed with improved redaction of sensitive information.
local
low complexity
apple
5.5
2023-12-12 CVE-2023-42886 Out-of-bounds Read vulnerability in Apple Macos
An out-of-bounds read was addressed with improved bounds checking.
local
low complexity
apple CWE-125
7.8
2023-12-12 CVE-2023-42890 Unspecified vulnerability in Apple products
The issue was addressed with improved memory handling.
network
low complexity
apple
8.8
2023-12-12 CVE-2023-42891 Unspecified vulnerability in Apple Macos
An authentication issue was addressed with improved state management.
local
low complexity
apple
5.5
2023-12-12 CVE-2023-42894 Unspecified vulnerability in Apple Macos
This issue was addressed with improved redaction of sensitive information.
local
low complexity
apple
5.5
2023-12-12 CVE-2023-42898 Unspecified vulnerability in Apple products
The issue was addressed with improved memory handling.
local
low complexity
apple
5.5