by Kastro
Paper/Archive/CVE-2023-40455

CVE-2023-40455

Apple macOS — A permissions issue was addressed with additional restrictions.

EPSS 1%CVSS 10.0
critical.is priorityof 100
44
CVSS 10.0 (ADP, NVD agree)10.0 / 10 × 3030.0Not in CISA KEV+300.0EPSS percentile 71.2.712 × 2014.2No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14. A sandboxed process may be able to circumvent sandbox restrictions.

Affected

ProductAffectedFixed inSource
macOSunspecified – < 1414CNA

Scores by source

CISA ADP10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
NVD10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refsupport.apple.com/en-us/HT213940refseclists.org/fulldisclosure/2023/Oct/3refsupport.apple.com/kb/HT213940