CVEvulnerability
CVE-2023-42969
3.3 LOW
Official page ↗
- Status
- Analyzed
- Published
- 2025-04-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 3.3 LOW — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
- Weaknesses
- CWE-284
Description
An app may be able to break out of its sandbox. This issue is fixed in iOS 17 and iPadOS 17, iOS 16.7 and iPadOS 16.7, macOS Sonoma 14, macOS Ventura 13.6, macOS Monterey 12.7. The issue was addressed with improved handling of caches.
Affected configurations
• apple ipados (< 16.7)
• apple iphone os (< 16.7)
• apple macos (< 12.7)
• apple macos (>= 13.0 < 13.6)
Related
Weakness · CWE (1)
- CWE-284 Improper Access Control weakness
References
- https://support.apple.com/en-us/120328 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/120329 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/120337 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/120949 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/120950 Release Notes, Vendor Advisory