CVE-2023-42892: Apple macOS

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.6.3, macOS Sonoma 14.2, macOS Monterey 12.7.2. A local attacker may be able to elevate their privileges.

Affected products

• Apple macOS: from 12.0, before 12.7.2 (fixed in 12.7.2); from 13.0, before 13.6.3 (fixed in 13.6.3); from 14.0, before 14.2 (fixed in 14.2)

Published 2024-03-28. Last modified 2026-06-17.