Severity
High
Analysis Summary
CVE-2023-28206
Apple macOS Ventura could allow a local attacker to gain elevated privileges on the system, caused by an out-of-bounds write in the IOSurfaceAccelerator. By using a specially crafted application, an attacker could exploit this vulnerability to execute arbitrary code with kernel privileges.
Impact
- Privilege Escalation
Indicators Of Compromise
CVE
- CVE-2023-28206
Affected Vendors
Apple
Affected Products
- Apple macOS Ventura 13.3
- Apple iOS 16.4
- Apple iPadOS 16.4
Remediation
Refer to Apple security document for patch, upgrade or suggested workaround information.