Race Condition Vulnerability in Apple macOS
CVE-2023-42832

7HIGH

Key Information:

Vendor
Apple
Status
Vendor
CVE Published:
10 January 2024

Summary

A vulnerability has been identified in macOS that involves a race condition leading to improper state handling. This flaw could allow applications the ability to gain unauthorized root privileges, compromising system security. Versions affected include macOS Big Sur, Monterey, and Ventura, with respective updates addressing this issue being made available. Users and administrators are encouraged to apply the latest updates to mitigate the risk associated with this vulnerability.

Affected Version(s)

macOS < 13.5

macOS < 11.7

macOS < 12.6

References

CVSS V3.1

Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.