CVE-2023-36495

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

An integer overflow was addressed with improved input validation. This issue is fixed in watchOS 9.6, macOS Monterey 12.6.8, iOS 15.7.8 and iPadOS 15.7.8, tvOS 16.6, iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. An app may be able to execute arbitrary code with kernel privileges.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-190

Affected software

Vendor	Product	Versions
Apple	tvOS	>= unspecified, < 16.6
Apple	iOS and iPadOS	>= unspecified, < 16.6
Apple	macOS	>= unspecified, < 13.5
Apple	iOS and iPadOS	>= unspecified, < 15.7
Apple	macOS	>= unspecified, < 12.6
Apple	watchOS	>= unspecified, < 9.6

References

https://support.apple.com/en-us/HT213841Vendor Advisory
https://support.apple.com/en-us/HT213842Vendor Advisory
https://support.apple.com/en-us/HT213843Vendor Advisory
https://support.apple.com/en-us/HT213844Vendor Advisory
https://support.apple.com/en-us/HT213846Vendor Advisory
https://support.apple.com/en-us/HT213848Vendor Advisory
https://support.apple.com/kb/HT213841Vendor Advisory
https://support.apple.com/kb/HT213842Vendor Advisory
https://support.apple.com/kb/HT213843Vendor Advisory
https://support.apple.com/kb/HT213844Vendor Advisory
https://support.apple.com/kb/HT213846Vendor Advisory
https://support.apple.com/kb/HT213848Vendor Advisory
https://support.apple.com/en-us/HT213841Vendor Advisory
https://support.apple.com/en-us/HT213842Vendor Advisory
https://support.apple.com/en-us/HT213843Vendor Advisory
https://support.apple.com/en-us/HT213844Vendor Advisory
https://support.apple.com/en-us/HT213846Vendor Advisory
https://support.apple.com/en-us/HT213848Vendor Advisory
https://support.apple.com/kb/HT213841Vendor Advisory
https://support.apple.com/kb/HT213842Vendor Advisory
https://support.apple.com/kb/HT213843Vendor Advisory
https://support.apple.com/kb/HT213844Vendor Advisory
https://support.apple.com/kb/HT213846Vendor Advisory
https://support.apple.com/kb/HT213848Vendor Advisory

Timeline

Published: Jul 28, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-364968.8Delegated Admin Privilege virtual attribute provider plugin, when enabled, allows an authenticated user to elevate their permissions in the CVE-2023-364978.8Dover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, 3.2, and 3.3 could allow a gu CVE-2023-364987.2A post-authentication command injection vulnerability exists in the PPTP client functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3 CVE-2023-364998.8Netgear XR300 v1.0.3.78 was discovered to contain multiple buffer overflows via the wla_ssid and wlg_ssid parameters at genie_ap_wifi_change CVE-2023-36504.8The Bubble Menu WordPress plugin before 3.0.5 does not sanitize and escape some of its settings, which could allow high-privilege users such CVE-2023-365016.1Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Michael Winkler teachPress plugin <= 9.0.2 versions.CVE-2023-365026.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cththemes Balkon plugin <= 1.3.2 versi CVE-2023-365035.4Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Max Foundry WordPress Button Plugin MaxButtons plugin <= 9.5.3 versions.CVE-2023-365049.8Missing Authorization vulnerability in BBS e-Theme BBS e-Popup.This issue affects BBS e-Popup: from n/a through 2.4.5.CVE-2023-365057.2Improper Input Validation vulnerability in Saturday Drive Ninja Forms Contact Form.This issue affects Ninja Forms Contact Form : from n/a th CVE-2023-365065.3Missing Authorization vulnerability in YITH YITH WooCommerce Waiting List allows Exploiting Incorrectly Configured Access Control Security L CVE-2023-365075.3Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Repute Infosystems BookingPress – Appointment Booking Calendar P