CVE-2023-42969

CVSS 3.3 LOWEPSS 0.2%CWE-284

Vexday Risk Score

8Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 3.3EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

11 Apr 2025Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

An app may be able to break out of its sandbox. This issue is fixed in iOS 17 and iPadOS 17, iOS 16.7 and iPadOS 16.7, macOS Sonoma 14, macOS Ventura 13.6, macOS Monterey 12.7. The issue was addressed with improved handling of caches.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Affected products

Apple · iOS and iPadOS Apple · macOS

References

https://support.apple.com/en-us/120328 https://support.apple.com/en-us/120329 https://support.apple.com/en-us/120337 https://support.apple.com/en-us/120949 https://support.apple.com/en-us/120950