VDB

GHSA-mv36-fpw2-f7fp

GHSA-mv36-fpw2-f7fp PUBLISHED CVSS 7.800000190734863 HIGH

Record from GitHub Advisory Database · Published July 27, 2023

A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Monterey 12.6.8, watchOS 9.6, iOS 15.7.8 and iPadOS 15.7.8, macOS Big Sur 11.7.9. An app may be able to execute arbitrary code with kernel privileges.

Risk scores

CVSS 3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Timeline

  • Jul 27, 2023 CVE Published
  • May 1, 2026 Security Advisory

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln GHSA-mv36-fpw2-f7fp
vulnetix vdb fixes GHSA-mv36-fpw2-f7fp

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/GHSA-mv36-fpw2-f7fp/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›