CVE-2023-40430

Summary

A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. An app may be able to access removable volumes without user consent.

Affected Software

VendorProductVersion RangeStatus
ApplemacOSunspecified < 14affected

Weaknesses

  • An app may be able to access removable volumes without user consent

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References