Downgrade Issue in Intel-based Mac Computers by Apple
CVE-2023-36862

5.5MEDIUM

Key Information:

Vendor

Apple
Status
macOS
Vendor
CVE Published:
27 July 2023

What is CVE-2023-36862?

A downgrade issue was discovered in Intel-based Mac computers, which could potentially allow an application to access the user's current location. This vulnerability has been addressed with the implementation of additional code-signing restrictions in macOS Ventura 13.5. Users are encouraged to update their systems to mitigate any possible exploitation stemming from this issue.

Affected Version(s)

macOS < 13.5

References

https://support.apple.com/en-us/HT213843

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.