Access Vulnerability in macOS by Apple
CVE-2023-42887
6.3MEDIUM
Summary
An access control vulnerability was identified in macOS that could allow applications to bypass sandbox restrictions, potentially enabling them to read arbitrary files. This security flaw underscores the importance of updated software protections to mitigate unauthorized file access. Apple has addressed this issue in recent updates, specifically macOS Ventura 13.6.4 and macOS Sonoma 14.2, enhancing sandboxing measures to safeguard user data against exploitation.
Affected Version(s)
macOS < 13.6
macOS < 14.2
References
CVSS V3.1
Score:
6.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed
Timeline
Vulnerability published
Vulnerability Reserved