CVE-2023-42961

CVSS 6.3 MEDIUMEPSS 0.4%CWE-22

Vexday Risk Score

13Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 6.3EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

11 abr 2025Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

A path handling issue was addressed with improved validation. This issue is fixed in iOS 17 and iPadOS 17, iOS 16.7 and iPadOS 16.7, macOS Sonoma 14, macOS Ventura 13.6, macOS Monterey 12.7. A sandboxed process may be able to circumvent sandbox restrictions.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Productos afectados

Apple · iOS and iPadOS Apple · macOS

Referencias

https://support.apple.com/en-us/120328 https://support.apple.com/en-us/120329 https://support.apple.com/en-us/120337 https://support.apple.com/en-us/120949 https://support.apple.com/en-us/120950