CVE-2023-28209

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system termination or write kernel memory.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-120

Affected software

No affected versions have been published.

Timeline

Published: Sep 6, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-282107.8A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause CVE-2023-282117.8A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause CVE-2023-282127.8A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause CVE-2023-282137.8A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause CVE-2023-282147.8A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause CVE-2023-282157.8A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause CVE-2023-282167.0Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability CVE-2023-282177.5Windows Network Address Translation (NAT) Denial of Service Vulnerability CVE-2023-282187.0Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability CVE-2023-282198.1Layer 2 Tunneling Protocol Remote Code Execution Vulnerability CVE-2023-28226.1A vulnerability was found in Ellucian Ethos Identity up to 5.10.5. It has been classified as problematic. Affected is an unknown function of CVE-2023-282208.1Layer 2 Tunneling Protocol Remote Code Execution Vulnerability