CVEvulnerability
CVE-2023-40421
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-10-25
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Description
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, macOS Ventura 13.6.1. An app may be able to access sensitive user data.
Affected configurations
• apple macos (>= 12.0.0 < 12.7.1)
• apple macos (>= 13.0 < 13.6.1)
• apple macos (>= 14.0 < 14.1)
References
- http://seclists.org/fulldisclosure/2023/Oct/21 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2023/Oct/24 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2023/Oct/26 Mailing List, Third Party Advisory
- https://support.apple.com/en-us/HT213983 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213984 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213985 Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT213983 Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT213984 Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT213985 Release Notes, Vendor Advisory
- http://seclists.org/fulldisclosure/2023/Oct/21 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2023/Oct/24 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2023/Oct/26 Mailing List, Third Party Advisory
- https://support.apple.com/en-us/HT213983 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213984 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213985 Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT213983 Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT213984 Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT213985 Release Notes, Vendor Advisory