The remote host is running a version of macOS / Mac OS X that is 11.x prior to 11.7.5. It is, therefore, affected by multiple vulnerabilities:

  - The issue was addressed with improved memory handling. This issue is fixed in iOS 15.7.8 and iPadOS     15.7.8, macOS Monterey 12.6.4, iOS 16.4 and iPadOS 16.4, macOS Big Sur 11.7.5. An app may be able to     execute arbitrary code with kernel privileges. (CVE-2023-23540)

  - A use after free issue was addressed with improved memory management. This issue is fixed in watchOS 8.6,     tvOS 15.5, iOS 15.5 and iPadOS 15.5. An application may be able to execute arbitrary code with kernel     privileges. (CVE-2022-26702)

  - The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and     iPadOS 16.4, macOS Big Sur 11.7.5, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. A user may gain access     to protected parts of the file system. (CVE-2023-23527)

  - The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey     12.6.4, macOS Big Sur 11.7.5. An archive may be able to bypass Gatekeeper. (CVE-2023-27951)

  - Multiple validation issues were addressed with improved input sanitization. This issue is fixed in macOS     Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, watchOS 9.4,     macOS Big Sur 11.7.5. Importing a maliciously crafted calendar invitation may exfiltrate user information.
    (CVE-2023-27961)

  - The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Big Sur     11.7.5. Processing a maliciously crafted image may result in disclosure of process memory.
    (CVE-2023-23534)

  - The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and     iPadOS 16.4, macOS Monterey 12.6.4, tvOS 16.4, macOS Big Sur 11.7.5. An app may be able to read arbitrary     files. (CVE-2023-27955)

  - An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS     Ventura 13.3, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. An app may be     able to cause unexpected system termination or write kernel memory. (CVE-2023-27936)

  - The issue was addressed with improved bounds checks. This issue is fixed in macOS Ventura 13.3, macOS     Monterey 12.6.4, macOS Big Sur 11.7.5. A remote user may be able to cause unexpected app termination or     arbitrary code execution. (CVE-2023-27935)

  - The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, macOS     Monterey 12.6.4, macOS Big Sur 11.7.5. A remote user may be able to cause unexpected system termination or     corrupt kernel memory. (CVE-2023-27953, CVE-2023-27958)

  - A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in     macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, watchOS 9.4, macOS Big Sur     11.7.5. An app may be able to read sensitive location information. (CVE-2023-23537)

  - An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS     Big Sur 11.7.5, macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey     12.6.4. Processing a font file may lead to arbitrary code execution. (CVE-2023-32366)

  - An integer overflow was addressed with improved input validation. This issue is fixed in macOS Ventura     13.3, iOS 16.4 and iPadOS 16.4, macOS Big Sur 11.7.5, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4.
    Parsing a maliciously crafted plist may lead to an unexpected app termination or arbitrary code execution.
    (CVE-2023-27937)

  - A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in     macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, tvOS 16.4, watchOS 9.4, macOS     Big Sur 11.7.5. An app may be able to access information about a user's contacts. (CVE-2023-27928)

  - An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Ventura     13.3, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. Processing a maliciously     crafted file may lead to unexpected app termination or arbitrary code execution. (CVE-2023-27946)

  - The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, iOS 16.4     and iPadOS 16.4, macOS Big Sur 11.7.5, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.6, tvOS 16.4,     watchOS 9.4. Processing a maliciously crafted image may result in disclosure of process memory.
    (CVE-2023-23535)

  - A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura     13.3, macOS Big Sur 11.7.5, macOS Monterey 12.6.4. An app may be able to execute arbitrary code with     kernel privileges. (CVE-2023-32378)

  - A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Ventura     13.3, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. An app may be able to     disclose kernel memory. (CVE-2023-27941, CVE-2023-28200)

  - An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with     improved input validation. This issue is fixed in macOS Ventura 13.3. An app may be able to disclose     kernel memory. (CVE-2023-28199)

  - The issue was addressed with improved bounds checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4     and iPadOS 16.4, macOS Big Sur 11.7.5, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, tvOS 16.4,     watchOS 9.4. An app may be able to execute arbitrary code with kernel privileges. (CVE-2023-23536)

  - A use after free issue was addressed with improved memory management. This issue is fixed in macOS Ventura     13.3, macOS Monterey 12.6.4, iOS 16.3.1 and iPadOS 16.3.1, macOS Ventura 13.2.1, macOS Big Sur 11.7.5. An     app may be able to execute arbitrary code with kernel privileges. (CVE-2023-23514)

  - An integer overflow was addressed through improved input validation. This issue is fixed in tvOS 16.4,     macOS Big Sur 11.7.5, iOS 16.4 and iPadOS 16.4, watchOS 9.4, macOS Monterey 12.6.4, iOS 15.7.4 and iPadOS     15.7.4. An app may be able to cause a denial-of-service. (CVE-2023-28185)

  - This issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and     iPadOS 16.4, macOS Big Sur 11.7.5. An app may be able to gain root privileges. (CVE-2023-23525)

  - A type confusion issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.7.5,     macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4. An app     may be able to execute arbitrary code with kernel privileges. (CVE-2023-41075)

  - The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey     12.6.4, macOS Big Sur 11.7.5. An app may be able to view sensitive information. (CVE-2023-28189)

  - An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Ventura     13.3, macOS Big Sur 11.7.5, macOS Monterey 12.6.4. An app may be able to access user-sensitive data.
    (CVE-2023-28197)

  - The issue was addressed with improved authentication. This issue is fixed in macOS Ventura 13.3, iOS 16.4     and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. A user in a     privileged network position may be able to spoof a VPN server that is configured with EAP-only     authentication on a device. (CVE-2023-28182)

  - A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS     Monterey 12.6.4, macOS Big Sur 11.7.5. An app may be able to modify protected parts of the file system.
    (CVE-2023-27962)

  - The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and     iPadOS 16.4, macOS Big Sur 11.7.5, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. An app may be able to     access user-sensitive data. (CVE-2023-27942)

  - A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in     macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. An app may be able to access user-     sensitive data. (CVE-2023-23542)

  - A permissions issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.3,     macOS Monterey 12.6.4, macOS Big Sur 11.7.5. An app may be able to read sensitive location information.
    (CVE-2023-28192)

  - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225. (CVE-2023-0433)

  - Divide By Zero in GitHub repository vim/vim prior to 9.0.1247. (CVE-2023-0512)

  - This issue was addressed with a new entitlement. This issue is fixed in macOS Ventura 13.3, macOS Monterey     12.6.4, macOS Big Sur 11.7.5. An app may be able to break out of its sandbox. (CVE-2023-27944)

Note that Nessus has not tested for these issues but has instead relied only on the operating system's self-reported version number.

The version of Apple iOS running on the mobile device is prior to 15.7.4. It is, therefore, affected by multiple vulnerabilities.

The version of Apple iOS running on the mobile device is prior to 16.4. It is, therefore, affected by multiple vulnerabilities.

ID	Name	Product	Family	Published	Updated	Severity
173442	macOS 11.x < 11.7.5 Multiple Vulnerabilities (HT213675)	Nessus	MacOS X Local Security Checks	3/27/2023	7/22/2024	critical
173472	Apple iOS < 15.7.4 Multiple Vulnerabilities (HT213673)	Nessus	Mobile Devices	3/28/2023	6/13/2024	critical
173738	Apple iOS < 16.4 Multiple Vulnerabilities (HT213676)	Nessus	Mobile Devices	3/31/2023	7/23/2024	critical
173444	macOS 13.x < 13.3 Multiple Vulnerabilities (HT213670)	Nessus	MacOS X Local Security Checks	3/27/2023	8/2/2024	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical