Privilege Escalation Vulnerability in Apple Products
CVE-2023-32396

7.8HIGH

Key Information:

Vendor
Apple
Status
Vendor
CVE Published:
27 September 2023

Summary

A security vulnerability exists in Apple’s operating systems that could allow an application to gain elevated privileges, potentially compromising user data. Apple has addressed this issue with enhanced validation checks in multiple product updates, including iOS 17, iPadOS 17, macOS Sonoma 14, tvOS 17, watchOS 10, and Xcode 15. Users are encouraged to update their devices to the latest versions to mitigate this risk.

Affected Version(s)

iOS and iPadOS < 17

macOS < 14

tvOS < 17

References

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.