CVEvulnerability
CVE-2023-40406
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-09-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Description
The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7, macOS Ventura 13.6, macOS Sonoma 14. An app may be able to read arbitrary files.
Affected configurations
• apple macos (>= 12.0.0 < 12.7)
• apple macos (>= 13.0 < 13.6)
References
- http://seclists.org/fulldisclosure/2023/Oct/3 seclists.org
- http://seclists.org/fulldisclosure/2023/Oct/5 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2023/Oct/6 seclists.org
- https://support.apple.com/en-us/HT213931 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213932 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213940 Release Notes, Vendor Advisory
- http://seclists.org/fulldisclosure/2023/Oct/3 seclists.org
- http://seclists.org/fulldisclosure/2023/Oct/5 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2023/Oct/6 seclists.org
- https://support.apple.com/en-us/HT213931 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213932 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213940 Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT213931 support.apple.com
- https://support.apple.com/kb/HT213932 support.apple.com
- https://support.apple.com/kb/HT213940 support.apple.com