CVE-2023-41989
N/A
N/A
Summary
The issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sonoma 14.1. An attacker may be able to execute arbitrary code as root from the Lock Screen.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Apple | macOS | unspecified < 14.1 | affected |
Weaknesses
- An attacker may be able to execute arbitrary code as root from the Lock Screen
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: total
CVE Program Container
Additional References
- https://support.apple.com/en-us/HT213984
- https://support.apple.com/kb/HT213984
- http://seclists.org/fulldisclosure/2023/Oct/24
- https://support.apple.com/kb/HT214038
- https://support.apple.com/kb/HT214037
References
- https://support.apple.com/en-us/HT213984
- https://support.apple.com/kb/HT213984
- http://seclists.org/fulldisclosure/2023/Oct/24
- https://support.apple.com/kb/HT214038
- https://support.apple.com/kb/HT214037
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.