CVEvulnerability
CVE-2023-41077
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-10-25
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-863
Description
An app may be able to access protected user data. This issue is fixed in macOS Sonoma 14, macOS Ventura 13.6.1. The issue was addressed with improved checks.
Affected configurations
• apple macos (>= 13.0 < 13.6.1)
Related
Weakness · CWE (1)
- CWE-863 Incorrect Authorization weakness
References
- https://support.apple.com/en-us/109050 support.apple.com
- https://support.apple.com/en-us/120950 support.apple.com
- http://seclists.org/fulldisclosure/2023/Oct/26 Mailing List, Third Party Advisory
- https://support.apple.com/en-us/HT213985 Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT213985 Release Notes, Vendor Advisory