CVEvulnerability
CVE-2023-41078
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-09-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
- Weaknesses
- CWE-863
Description
An authorization issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14. An app may be able to bypass certain Privacy preferences.
Affected configurations
• apple macos (< 14.0)
Related
Weakness · CWE (1)
- CWE-863 Incorrect Authorization weakness
References
- http://seclists.org/fulldisclosure/2023/Oct/3 Mailing List, Third Party Advisory
- https://support.apple.com/en-us/HT213940 Release Notes, Vendor Advisory
- http://seclists.org/fulldisclosure/2023/Oct/3 Mailing List, Third Party Advisory
- https://support.apple.com/en-us/HT213940 Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT213940 support.apple.com