The remote host is running a version of macOS / Mac OS X that is 11.x prior to 11.7.5. It is, therefore, affected by multiple vulnerabilities:

  - A use after free issue was addressed with improved memory management. This issue is fixed in watchOS 8.6,     tvOS 15.5, iOS 15.5 and iPadOS 15.5. An application may be able to execute arbitrary code with kernel     privileges. (CVE-2022-26702)

  - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225. (CVE-2023-0433)

  - Divide By Zero in GitHub repository vim/vim prior to 9.0.1247. (CVE-2023-0512)

  - A use after free issue was addressed with improved memory management. This issue is fixed in macOS Ventura     13.3, macOS Monterey 12.6.4, iOS 16.3.1 and iPadOS 16.3.1, macOS Ventura 13.2.1, macOS Big Sur 11.7.5. An     app may be able to execute arbitrary code with kernel privileges. (CVE-2023-23514)

  - This issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and     iPadOS 16.4, macOS Big Sur 11.7.5. An app may be able to gain root privileges. (CVE-2023-23525)

  - The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and     iPadOS 16.4, macOS Big Sur 11.7.5, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. A user may gain access     to protected parts of the file system. (CVE-2023-23527)

  - The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Big Sur     11.7.5. Processing a maliciously crafted image may result in disclosure of process memory.
    (CVE-2023-23534)

  - The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, iOS 16.4     and iPadOS 16.4, macOS Big Sur 11.7.5, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.6, tvOS 16.4,     watchOS 9.4. Processing a maliciously crafted image may result in disclosure of process memory.
    (CVE-2023-23535)

  - The issue was addressed with improved bounds checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4     and iPadOS 16.4, macOS Big Sur 11.7.5, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, tvOS 16.4,     watchOS 9.4. An app may be able to execute arbitrary code with kernel privileges. (CVE-2023-23536)

  - A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in     macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, watchOS 9.4, macOS Big Sur     11.7.5. An app may be able to read sensitive location information. (CVE-2023-23537)

  - The issue was addressed with improved memory handling. This issue is fixed in iOS 15.7.8 and iPadOS     15.7.8, macOS Monterey 12.6.4, iOS 16.4 and iPadOS 16.4, macOS Big Sur 11.7.5. An app may be able to     execute arbitrary code with kernel privileges. (CVE-2023-23540)

  - A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in     macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. An app may be able to access user-     sensitive data. (CVE-2023-23542)

  - A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in     macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, tvOS 16.4, watchOS 9.4, macOS     Big Sur 11.7.5. An app may be able to access information about a user's contacts. (CVE-2023-27928)

  - The issue was addressed with improved bounds checks. This issue is fixed in macOS Ventura 13.3, macOS     Monterey 12.6.4, macOS Big Sur 11.7.5. A remote user may be able to cause unexpected app termination or     arbitrary code execution. (CVE-2023-27935)

  - An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS     Ventura 13.3, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. An app may be     able to cause unexpected system termination or write kernel memory. (CVE-2023-27936)

  - An integer overflow was addressed with improved input validation. This issue is fixed in macOS Ventura     13.3, iOS 16.4 and iPadOS 16.4, macOS Big Sur 11.7.5, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4.
    Parsing a maliciously crafted plist may lead to an unexpected app termination or arbitrary code execution.
    (CVE-2023-27937)

  - A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Ventura     13.3, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. An app may be able to     disclose kernel memory. (CVE-2023-27941, CVE-2023-28200)

  - The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and     iPadOS 16.4, macOS Big Sur 11.7.5, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. An app may be able to     access user-sensitive data. (CVE-2023-27942)

  - This issue was addressed with a new entitlement. This issue is fixed in macOS Ventura 13.3, macOS Monterey     12.6.4, macOS Big Sur 11.7.5. An app may be able to break out of its sandbox. (CVE-2023-27944)

  - An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Ventura     13.3, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. Processing a maliciously     crafted file may lead to unexpected app termination or arbitrary code execution. (CVE-2023-27946)

  - The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey     12.6.4, macOS Big Sur 11.7.5. An archive may be able to bypass Gatekeeper. (CVE-2023-27951)

  - The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, macOS     Monterey 12.6.4, macOS Big Sur 11.7.5. A remote user may be able to cause unexpected system termination or     corrupt kernel memory. (CVE-2023-27953, CVE-2023-27958)

  - The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and     iPadOS 16.4, macOS Monterey 12.6.4, tvOS 16.4, macOS Big Sur 11.7.5. An app may be able to read arbitrary     files. (CVE-2023-27955)

  - Multiple validation issues were addressed with improved input sanitization. This issue is fixed in macOS     Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, watchOS 9.4,     macOS Big Sur 11.7.5. Importing a maliciously crafted calendar invitation may exfiltrate user information.
    (CVE-2023-27961)

  - A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS     Monterey 12.6.4, macOS Big Sur 11.7.5. An app may be able to modify protected parts of the file system.
    (CVE-2023-27962)

  - The issue was addressed with improved authentication. This issue is fixed in macOS Ventura 13.3, iOS 16.4     and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. A user in a     privileged network position may be able to spoof a VPN server that is configured with EAP-only     authentication on a device. (CVE-2023-28182)

  - An integer overflow was addressed through improved input validation. This issue is fixed in tvOS 16.4,     macOS Big Sur 11.7.5, iOS 16.4 and iPadOS 16.4, watchOS 9.4, macOS Monterey 12.6.4, iOS 15.7.4 and iPadOS     15.7.4. An app may be able to cause a denial-of-service. (CVE-2023-28185)

  - The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey     12.6.4, macOS Big Sur 11.7.5. An app may be able to view sensitive information. (CVE-2023-28189)

  - A permissions issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.3,     macOS Monterey 12.6.4, macOS Big Sur 11.7.5. An app may be able to read sensitive location information.
    (CVE-2023-28192)

  - An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Ventura     13.3, macOS Big Sur 11.7.5, macOS Monterey 12.6.4. An app may be able to access user-sensitive data.
    (CVE-2023-28197)

  - An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with     improved input validation. This issue is fixed in macOS Ventura 13.3. An app may be able to disclose     kernel memory. (CVE-2023-28199)

  - An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS     Big Sur 11.7.5, macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey     12.6.4. Processing a font file may lead to arbitrary code execution. (CVE-2023-32366)

  - A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura     13.3, macOS Big Sur 11.7.5, macOS Monterey 12.6.4. An app may be able to execute arbitrary code with     kernel privileges. (CVE-2023-32378)

  - This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.6.4, macOS Big Sur     11.7.5, macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4. A sandboxed process may be able to circumvent     sandbox restrictions. (CVE-2023-40398)

  - A type confusion issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.7.5,     macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4. An app     may be able to execute arbitrary code with kernel privileges. (CVE-2023-41075)

Note that Nessus has not tested for these issues but has instead relied only on the operating system's self-reported version number.

Detections

Analytics

macOS 11.x < 11.7.5 Multiple Vulnerabilities (HT213675)

critical Nessus Plugin ID 173442

Version 1.8

Version 1.7

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.0

Version 1.8 Aug 22, 2024, 7:30 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Plugin metadata Plugin Feed: 202408221930
Version 1.7 Jul 22, 2024, 8:33 PM CVE (set "CVE" coverage to "CVE-2022-26702,CVE-2023-0433,CVE-2023-0512,CVE-2023-23514,CVE-2023-23525,CVE-2023-23527,CVE-2023-23534,CVE-2023-23535,CVE-2023-23536,CVE-2023-23537,CVE-2023-23540,CVE-2023-23542,CVE-2023-27928,CVE-2023-27935,CVE-2023-27936,CVE-2023-27937,CVE-2023-27941,CVE-2023-27942,CVE-2023-27944,CVE-2023-27946,CVE-2023-27951,CVE-2023-27953,CVE-2023-27955,CVE-2023-27958,CVE-2023-27961,CVE-2023-27962,CVE-2023-28182,CVE-2023-28185,CVE-2023-28189,CVE-2023-28192,CVE-2023-28197,CVE-2023-28199,CVE-2023-28200,CVE-2023-32366,CVE-2023-32378,CVE-2023-40398,CVE-2023-41075") Detection (updated detection logic) Plugin metadata Plugin Feed: 202407222033
Version 1.6 Jun 14, 2024, 2:32 PM Plugin metadata (add macOS version to CPEs) Plugin Feed: 202406141432
Version 1.5 May 15, 2023, 2:09 PM CVSS metrics ("CVSSv3 score" changed from 8.8 to 9.8. "CVSSv3 vector" changed from "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H") CVSSv3 score source (changed from "CVE-2023-27935" to "CVE-2023-27953") Plugin Feed: 202305151409
Version 1.4 May 14, 2023, 10:07 AM CVSS metrics ("CVSSv3 score" changed from 7.8 to 8.8. "CVSSv3 vector" changed from "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" to "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H") CVSSv3 score source (changed from "CVE-2023-23514" to "CVE-2023-27935") Plugin Feed: 202305141007
Version 1.3 Apr 12, 2023, 12:04 PM IAVM reference Plugin Feed: 202304121204
Version 1.2 Mar 31, 2023, 12:03 PM IAVM reference STIG Severity (set to "I") Plugin Feed: 202303311203
Version 1.1 Mar 28, 2023, 2:03 PM Exploit attributes ("Exploit available" set to "True". "Exploit available" set to "True". "Exploit available" set to "True". "Exploit available" set to "True". "Exploitability ease" changed from "No known exploits are available" to "Exploits are available". "Exploitability ease" changed from "No known exploits are available" to "Exploits are available". "Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin Feed: 202303281403
Version 1.0 Mar 28, 2023, 6:00 AM New Plugin Feed: 202303280600