CVE-2023-27960

EPSS 0.1%
Veröffentlicht 08.05.2023 20:15:18
Zuletzt bearbeitet 29.01.2025 16:15:40
Quelle product-security@apple.com
Teams Watchlist Login
Unerledigt Login

This issue was addressed by removing the vulnerable code. This issue is fixed in GarageBand for macOS 10.4.8. An app may be able to gain elevated privileges during the installation of GarageBand.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 0 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Apple ≫ macOS X Version >= 10.0 < 10.4.8

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.1%	0.28

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
134c704f-9b21-4f2e-91b3-4a467353bcc0	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

https://support.apple.com/en-us/HT213650

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2023-27960

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-27960

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-27960

EUVD