CVE-2023-42887

CVSS 6.3 MEDIUMEPSS 0.2%

Vexday Risk Score

13Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 6.3EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

23 ene 2024Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Ventura 13.6.4, macOS Sonoma 14.2. An app may be able to read arbitrary files.

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N

Productos afectados

Apple · macOS

Referencias

http://seclists.org/fulldisclosure/2024/Jan/37 https://support.apple.com/en-us/HT214036 https://support.apple.com/en-us/HT214058 https://support.apple.com/kb/HT214036 https://support.apple.com/kb/HT214058