CVE-2023-27960

EPSS 0.1%
Published 08.05.2023 20:15:18
Last modified 29.01.2025 16:15:40
Source product-security@apple.com
Teams watchlist Login
Open Login

This issue was addressed by removing the vulnerable code. This issue is fixed in GarageBand for macOS 10.4.8. An app may be able to gain elevated privileges during the installation of GarageBand.

Affected products Warnungen 0 Metrics 3 CWE 0 References 4

Data is provided by the National Vulnerability Database (NVD)

Apple ≫ macOS X Version >= 10.0 < 10.4.8

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.1%	0.28

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
134c704f-9b21-4f2e-91b3-4a467353bcc0	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

https://support.apple.com/en-us/HT213650

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2023-27960

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-27960

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-27960

EUVD