CVEvulnerability
CVE-2023-42896
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2024-03-28
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
- Weaknesses
- CWE-862
Description
An issue was addressed with improved handling of temporary files. This issue is fixed in macOS Monterey 12.7.2, macOS Ventura 13.6.3, iOS 17.2 and iPadOS 17.2, iOS 16.7.3 and iPadOS 16.7.3, macOS Sonoma 14.2. An app may be able to modify protected parts of the file system.
Affected configurations
• apple ipados (< 16.7.3)
• apple ipados (>= 17.0 < 17.2)
• apple iphone os (< 16.7.3)
• apple iphone os (>= 17.0 < 17.2)
• apple macos (>= 12.0 < 12.7.2)
• apple macos (>= 13.0 < 13.6.3)
• apple macos (>= 14.0 < 14.2)
Related
Weakness · CWE (1)
- CWE-862 Missing Authorization weakness
References
- https://support.apple.com/en-us/HT214034 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214035 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214036 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214037 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214038 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214034 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214035 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214036 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214037 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214038 Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT214035 support.apple.com
- https://support.apple.com/kb/HT214036 support.apple.com
- https://support.apple.com/kb/HT214037 support.apple.com
- https://support.apple.com/kb/HT214038 support.apple.com