高危
Apple iOS,iPadOS,macOS和watchOS kernel权限提升漏洞
2023-09-21 18:23:49 公开 ，2026-02-27 09:33:02 更新
- 关键漏洞
- CISA KEV
- 勒索软件漏洞
- 本地
- 公开PoC
- CWEs：
- CWE-754 （Improper Check for Unusual or Exceptional Conditions）
- SSVC：
- 可利用状态：已被积极利用攻击自动化：否技术影响评估：全部 2025-02-05 00:26:34
风险信息
- CVSS v3 向量
- AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS v3 风险值
- 7.8
- CVSS v3.1 向量
- AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS v3.1 风险值
- 7.8
详细信息
- 漏洞类型
- 其他
- 漏洞描述
- Apple macOS Ventura、macOS Monterey、watchOS、iOS和iPadOS可能会允许本地攻击者通过内核组件中的问题获得系统上的提升权限。通过使用特制的应用程序，攻击者可以利用此漏洞在系统上获得提升的权限。在iOS 16.7之前的iOS版本中，此问题正在被积极利用。
- 修复建议
- 此问题已在iOS 16.7和iPadOS 16.7、OS 17.0.1和iPadOS17.0.1、watchOS 9.6.3、macOS Ventura 13.6、macOS Monterey 12.7和watchOS 10.0.1中修复。有关补丁、升级或建议的解决方法信息，请参阅苹果安全文档： https://support.apple.com/en-us/HT213926 https://support.apple.com/en-us/HT213927 https://support.apple.com/en-us/HT213928 https://support.apple.com/en-us/HT213929 https://support.apple.com/en-us/HT213931 https://support.apple.com/en-us/HT213932 https://support.apple.com/kb/HT213926
参考链接
- https://support.apple.com/en-us/HT213932
NVD · Release Notes · Vendor Advisory
- https://support.apple.com/en-us/HT213927
NVD · Release Notes · Vendor Advisory
- https://support.apple.com/en-us/HT213931
NVD · Release Notes · Vendor Advisory
- http://seclists.org/fulldisclosure/2023/Oct/5
- http://seclists.org/fulldisclosure/2023/Oct/6
- http://seclists.org/fulldisclosure/2023/Oct/4
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-41992
NVD · US Government Resource
- https://support.apple.com/kb/HT213927
NVD · Vendor Advisory
- https://support.apple.com/kb/HT213932
NVD · Vendor Advisory
- https://support.apple.com/en-us/HT213929
CNNVD
- http://seclists.org/fulldisclosure/2023/Sep/18
CNNVD
- http://seclists.org/fulldisclosure/2023/Sep/14
CNNVD
- https://cxsecurity.com/cveshow/CVE-2023-41992/
CNNVD
- http://seclists.org/fulldisclosure/2023/Sep/15
CNNVD
- http://seclists.org/fulldisclosure/2023/Sep/16
CNNVD
- https://support.apple.com/kb/HT213926
CNNVD
- https://support.apple.com/en-us/HT213928
CNNVD
- http://seclists.org/fulldisclosure/2023/Sep/17
CNNVD
- http://seclists.org/fulldisclosure/2023/Sep/19
CNNVD
- https://support.apple.com/en-us/HT213926
CNNVD