{"id":"CVE-2023-28200","aliases":["EUVD-2023-31908","GHSA-36r6-mm7x-rqmm"],"status":"published","title":"A validation issue was addressed with improved input sanitization. This issue is fixed in macOS...","description":"A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Ventura 13.3, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. An app may be able to disclose kernel memory.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00314,"percentile":0.24519,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20","CWE-203"],"published":"2023-05-08T00:00:00Z","modified":"2026-06-17T05:47:05Z","products":[{"vendor":"apple","product":"ios and ipados"},{"vendor":"apple","product":"ipados"},{"vendor":"apple","product":"iphone_os"},{"vendor":"apple","product":"macos"}],"references":[{"url":"https://support.apple.com/en-us/HT213670","tags":["x_transferred","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/HT213677","tags":["x_transferred","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/HT213675","tags":["x_transferred","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/HT213673","tags":["x_transferred","Vendor Advisory"]},{"url":"https://support.apple.com/kb/HT213843","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-28200"},{"url":"https://github.com/advisories/GHSA-36r6-mm7x-rqmm"}],"sources":{"cve":[{"id":"CVE-2023-28200","description":"A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Ventura 13.3, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. An app may be able to disclose kernel memory.","status":"published","published":"2023-05-08T00:00:00Z","modified":"2025-02-13T16:48:32.781Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-203"],"updated_at":"2026-11-02T14:35:32.752775Z"}],"euvd":[{"id":"EUVD-2023-31908","description":"A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Ventura 13.3, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. An app may be able to disclose kernel memory.","status":"published","published":"2023-05-08T00:00:00Z","modified":"2025-02-13T16:48:32Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T00:03:50.947767Z"}],"ghsa":[{"id":"GHSA-36r6-mm7x-rqmm","title":"A validation issue was addressed with improved input sanitization. This issue is fixed in macOS...","description":"A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, iOS 15.7.4 and iPadOS 15.7.4, macOS Big Sur 11.7.5. An app may be able to disclose kernel memory","status":"published","published":"2023-05-08T21:31:08Z","modified":"2025-01-29T21:32:25Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-20","CWE-203"],"updated_at":"2026-11-02T14:59:43.349858Z"}],"nvd":[{"id":"CVE-2023-28200","description":"A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Ventura 13.3, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. An app may be able to disclose kernel memory.","status":"published","published":"2023-05-08T20:15:19.687Z","modified":"2026-06-17T05:47:05.16Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-20","CWE-203"],"updated_at":"2026-11-02T14:08:01.131774Z"}]}}