SecPod

Learn Search

Search across all Learn content

← Back to Security Research
Apple’s December 2023 Updates Addresses Multiple Security Vulnerabilities!

Apple’s December 2023 Updates Addresses Multiple Security Vulnerabilities!

Dec 18, 2023By Mohammad Faizel3 min read

Apple’s Security Alert for December 2023 recently released multiple updates to patch eight Apple products affected by multiple vulnerabilities. An attacker who successfully exploits these flaws could therefore compromise the affected device, leading to arbitrary code execution and a denial-of-service (DoS) condition.

The security updates published address multiple issues in macOS (macOS Sonoma, macOS Monterey, and macOS Ventura) and two vulnerabilities were also fixed in Apple Safari.

Apple’s Security Alert December 2023 Updates Summary:

1. Safari

    • Affected OS: macOS Monterey
    • Affected features: WebKit
    • Impact: Arbitrary Code Execution

2. macOS

*macOS Ventura

    • Affected OS: macOS Ventura before 13.6.3
    • Affected features: Accounts, Apple AVE Video Encoder Events, Archive Utility, Core Services, Find My, ImageIO, IOKit, Kernel, TCC, and Vim.
    • Impact: Arbitrary Code Execution and Denial-of-Service.

*macOS Monterey

    • Affected OS: macOS Monterey before 12.7.2.
    • Affected features: Accounts, Apple Events, Core Services, Find My, IOKit, Kernel, TCC, and Vim.
    • Impact: Arbitrary Code Execution and Sensitive Information Disclosure.

*macOS Sonoma

    • Affected OS: macOS Sonoma before 14.2
    • Affected features: Accessibility, Accounts, Apple Events, Apple Graphics Control,  Apple VA, Archive Utility, AVE Video Encoder, Bluetooth, Core Media Playback, Core Services, Extension Kit, Find My, Image IO, IO Kit, Kernel, Shared File List, TCC, Vim,  WebKit.   

3. iOS and iPadOS

* iOS 17.2 and iPadOS 17.2

* iOS 16.7.3 and iPadOS 16.7.3.

4. watchOS

*watchOS 10.2

5. tvOS

*

tvOS 17.2

Above is the list of products affected in Apple’s December Security Alert.

SanerNow VM

SanerNow PM

PM detect and automatically fix these vulnerabilities by applying security updates. Therefore, use

SanerNow

and keep your systems updated and secure.

Featured Posts

Open CVE-2026-31431: From 732 Bytes to Root - Anatomy of a Modern Linux Privilege Escalation

CVE-2026-31431: From 732 Bytes to Root - Anatomy of a Modern Linux Privilege Escalation

CVE Research

CVE-2026-31431: From 732 Bytes to Root - Anatomy of a Modern Linux Privilege Escalation

Jun 24, 2026

Open CVE-2026-31431: The Nine-Year Kernel Bug Hiding in Plain Sight

CVE-2026-31431: The Nine-Year Kernel Bug Hiding in Plain Sight

CVE Research

CVE-2026-31431: The Nine-Year Kernel Bug Hiding in Plain Sight

Jun 23, 2026

Open Squidbleed: A 29-Year-Old Squid Proxy Flaw That Leaks Cleartext HTTP Requests
Squidbleed: A 29-Year-Old Squid Proxy Flaw That Leaks Cleartext HTTP Requests

CVE Research

Squidbleed: A 29-Year-Old Squid Proxy Flaw That Leaks Cleartext HTTP Requests

Jun 23, 2026

Open AryStinger Malware Leverages 4,300+ Legacy Routers to Establish Persistent Spy Infrastructure
AryStinger Malware Leverages 4,300+ Legacy Routers to Establish Persistent Spy Infrastructure

CVE Research

AryStinger Malware Leverages 4,300+ Legacy Routers to Establish Persistent Spy Infrastructure

AryStinger represents a calculated shift in IoT threat methodology, abandoning noisy, destructive payloads in favor of silent, long-term reconnaissance infrastructure. By exploiting unpatched, end-of-life routers and NAS devices through decade-old vulnerabilities, the threat operator has assembled a distributed fleet of over 4,300 Executor nodes capable of conducting parallelized DNS enumeration, port scanning, and service fingerprinting at scale, all while masking origin behind residential IP addresses. With active development ongoing and a potential operational timeline stretching back to 2024, AryStinger underscores a growing and underappreciated risk: forgotten edge hardware is not merely a compliance gap but exploitable infrastructure.

Jun 23, 2026

Apple’s December 2023 Updates Addresses Multiple Security Vulnerabilit | SecPod