← back
CVE-2023-40406

CVE-2023-40406

EPSS 0.3%
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
26 Sep 2023Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7, macOS Ventura 13.6, macOS Sonoma 14. An app may be able to read arbitrary files.
Affected products
Apple · macOS
References
http://seclists.org/fulldisclosure/2023/Oct/3http://seclists.org/fulldisclosure/2023/Oct/5http://seclists.org/fulldisclosure/2023/Oct/6https://support.apple.com/en-us/HT213931https://support.apple.com/en-us/HT213932https://support.apple.com/en-us/HT213940https://support.apple.com/kb/HT213931https://support.apple.com/kb/HT213932https://support.apple.com/kb/HT213940