7.8

CVE-2023-23497

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7.3, macOS Ventura 13.2, macOS Monterey 12.6.3. An app may be able to gain root privileges.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apple ≫ macOS Version >= 11.0 < 11.7.3
Apple ≫ macOS Version >= 12.0.0 < 12.6.3
Apple ≫ macOS Version >= 13.0 < 13.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.23% 0.137
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-269 Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

https://support.apple.com/en-us/HT213604
Vendor Advisory
Release Notes
https://support.apple.com/en-us/HT213605
Vendor Advisory
Release Notes
https://support.apple.com/en-us/HT213603
Vendor Advisory
Release Notes