CVE-2023-42884: 
macOS vulnerability analysis and mitigation

CVE-2023-42884 is a security vulnerability affecting multiple Apple operating systems, including iOS, iPadOS, macOS, and tvOS. The vulnerability was disclosed and patched by Apple on December 11, 2023. The issue allows an application to potentially disclose kernel memory due to improper redaction of sensitive information (Apple Support, NVD).

The vulnerability has been assigned a CVSS v3.1 base score of 5.5 (Medium) with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N. The issue stems from inadequate redaction of sensitive information in kernel memory, which could potentially be exposed to applications. The vulnerability was addressed by Apple through improved redaction mechanisms (NVD).

The vulnerability allows an application to potentially access and disclose kernel memory, which could lead to exposure of sensitive system information. This could potentially compromise system security by revealing critical kernel data to unauthorized applications (Apple Support).

The vulnerability requires local access and user interaction to be exploited. There are no reports of this vulnerability being actively exploited in the wild at the time of disclosure (NVD).

Apple has released security updates to address this vulnerability in multiple operating system versions: iOS 17.2, iPadOS 17.2, iOS 16.7.3, iPadOS 16.7.3, macOS Sonoma 14.2, macOS Ventura 13.6.3, and tvOS 17.2. Users are advised to update their devices to the latest available versions (Apple Support).