CVE-2023-32387: 
macOS vulnerability analysis and mitigation

CVE-2023-32387 is a use-after-free vulnerability discovered in Apple's dcerpc component that affects multiple versions of macOS. The vulnerability was fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, and macOS Ventura 13.4, released on May 18, 2023. The vulnerability was discovered by Dimitrios Tatsis of Cisco Talos (Apple Security, NVD).

The vulnerability is a use-after-free issue in the dcerpc component that was addressed with improved memory management. It has been assigned a CVSS v3.1 base score of 9.8 CRITICAL with a vector string of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating it can be exploited remotely with low attack complexity and no required privileges or user interaction (NVD).

A successful exploitation of this vulnerability could allow a remote attacker to cause unexpected application termination or execute arbitrary code on the affected system (Apple Security, Rapid7).

Apple has addressed this vulnerability by releasing security updates for affected macOS versions. Users should update to macOS Big Sur 11.7.7, macOS Monterey 12.6.6, or macOS Ventura 13.4 or later versions to mitigate this vulnerability (Apple Security).