CVE-2023-23520

Summary

A race condition was addressed with additional validation. This issue is fixed in watchOS 9.3, tvOS 16.3, macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3. A user may be able to read arbitrary files as root.

Affected Software

Weaknesses

• A user may be able to read arbitrary files as root

ADP Enrichment

CVE Program Container

Additional References

• https://support.apple.com/en-us/HT213606
• https://support.apple.com/en-us/HT213601
• https://support.apple.com/en-us/HT213605
• https://support.apple.com/en-us/HT213599

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://support.apple.com/en-us/HT213606
• https://support.apple.com/en-us/HT213601
• https://support.apple.com/en-us/HT213605
• https://support.apple.com/en-us/HT213599

• ←Previous
• Next→