CVE-2023-34425

The issue was addressed with improved memory handling. This issue is fixed in watchOS 9.6, macOS Monterey 12.6.8, iOS 15.7.8 and iPadOS 15.7.8, macOS Big Sur 11.7.9, iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. An app may be able to execute arbitrary code with kernel privileges.

• https://support.apple.com/en-us/HT213841Vendor Advisory
• https://support.apple.com/en-us/HT213842Vendor Advisory
• https://support.apple.com/en-us/HT213843Vendor Advisory
• https://support.apple.com/en-us/HT213844Vendor Advisory
• https://support.apple.com/en-us/HT213845Vendor Advisory
• https://support.apple.com/en-us/HT213848Vendor Advisory
• https://support.apple.com/kb/HT213841Vendor Advisory
• https://support.apple.com/kb/HT213842Vendor Advisory
• https://support.apple.com/kb/HT213843Vendor Advisory
• https://support.apple.com/kb/HT213844Vendor Advisory
• https://support.apple.com/kb/HT213845Vendor Advisory
• https://support.apple.com/kb/HT213848Vendor Advisory
• https://support.apple.com/en-us/HT213841Vendor Advisory
• https://support.apple.com/en-us/HT213842Vendor Advisory
• https://support.apple.com/en-us/HT213843Vendor Advisory
• https://support.apple.com/en-us/HT213844Vendor Advisory
• https://support.apple.com/en-us/HT213845Vendor Advisory
• https://support.apple.com/en-us/HT213848Vendor Advisory
• https://support.apple.com/kb/HT213841Vendor Advisory
• https://support.apple.com/kb/HT213842Vendor Advisory
• https://support.apple.com/kb/HT213843Vendor Advisory
• https://support.apple.com/kb/HT213844Vendor Advisory
• https://support.apple.com/kb/HT213845Vendor Advisory
• https://support.apple.com/kb/HT213848Vendor Advisory

Published

Jul 28, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-3442A missing authorization vulnerability exists in versions of …7.5
• CVE-2023-34420A valid, authenticated LXCA user with elevated privileges ma…7.2
• CVE-2023-34421A valid, authenticated LXCA user with elevated privileges ma…6.5
• CVE-2023-34422A valid, authenticated LXCA user with elevated privileges ma…6.5
• CVE-2023-34423Survey Maker prior to 3.6.4 contains a stored cross-site scr…6.1
• CVE-2023-34424Improper input validation in firmware for some Intel(R) CSME…6.7
• CVE-2023-34426A stack-based buffer overflow vulnerability exists in the ht…9.8
• CVE-2023-34427Protection mechanism failure in some Intel(R) RealSense(TM) …7.8
• CVE-2023-34429 Weintek Weincloud v0.13.6 could allow an attacker to …7.5
• CVE-2023-3443An issue has been discovered in GitLab affecting all version…4.3
• CVE-2023-34430Uncontrolled search path in some Intel Battery Life Diagnost…7.8
• CVE-2023-34431Improper input validation in some Intel(R) Server Board BIOS…6.7