← back
CVE-2023-40389

CVE-2023-40389

CVSS 5.5 MEDIUMEPSS 0.2%
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 5.5EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
10 Jun 2024Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
The issue was addressed with improved restriction of data container access. This issue is fixed in macOS Ventura 13.6.5, macOS Monterey 12.7.4. An app may be able to access sensitive user data.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected products
Apple · macOS
References
https://support.apple.com/en-us/HT214083https://support.apple.com/en-us/HT214085https://support.apple.com/kb/HT214035https://support.apple.com/kb/HT214036https://support.apple.com/kb/HT214040https://support.apple.com/kb/HT214041https://support.apple.com/kb/HT214083https://support.apple.com/kb/HT214085