CVE-2023-42853

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-42853
A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, macOS Ventura 13.6.1. An app may be able to access user-sensitive data.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
http://seclists.org/fulldisclosure/2024/Mar/21 Mailing List
https://support.apple.com/en-us/HT213983 Vendor Advisory
https://support.apple.com/en-us/HT213984 Vendor Advisory
https://support.apple.com/en-us/HT213985 Vendor Advisory
https://support.apple.com/kb/HT214084 Vendor Advisory
http://seclists.org/fulldisclosure/2024/Mar/21 Mailing List
https://support.apple.com/en-us/HT213983 Vendor Advisory
https://support.apple.com/en-us/HT213984 Vendor Advisory
https://support.apple.com/en-us/HT213985 Vendor Advisory
https://support.apple.com/kb/HT213983
https://support.apple.com/kb/HT213984
https://support.apple.com/kb/HT213985
https://support.apple.com/kb/HT214084 Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:14.0:*:*:*:*:*:*:*
History

04 Nov 2025, 20:16

Type Values Removed Values Added
References
  • () https://support.apple.com/kb/HT213983 -
  • () https://support.apple.com/kb/HT213984 -
  • () https://support.apple.com/kb/HT213985 -

27 Mar 2025, 15:15

Type Values Removed Values Added
CWE CWE-284

09 Dec 2024, 18:36

Type Values Removed Values Added
First Time Apple
Apple macos
CPE cpe:2.3:o:apple:macos:14.0:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
CWE NVD-CWE-noinfo
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
References () http://seclists.org/fulldisclosure/2024/Mar/21 - () http://seclists.org/fulldisclosure/2024/Mar/21 - Mailing List
References () https://support.apple.com/en-us/HT213983 - () https://support.apple.com/en-us/HT213983 - Vendor Advisory
References () https://support.apple.com/en-us/HT213984 - () https://support.apple.com/en-us/HT213984 - Vendor Advisory
References () https://support.apple.com/en-us/HT213985 - () https://support.apple.com/en-us/HT213985 - Vendor Advisory
References () https://support.apple.com/kb/HT214084 - () https://support.apple.com/kb/HT214084 - Vendor Advisory
Information

Published : 2024-02-21 07:15

Updated : 2025-11-04 20:16

NVD link : CVE-2023-42853

Mitre link : CVE-2023-42853

CVE.ORG link : CVE-2023-42853

JSON object : View

Products Affected

apple

  • macos
CWE
NVD-CWE-noinfo CWE-284

Improper Access Control