VDB
CVE-2023-40389
CVE-2023-40389
PUBLISHED
CVSS 5.5 MEDIUM
The issue was addressed with improved restriction of data container access. This issue is fixed in macOS Ventura 13.6.5, macOS Monterey 12.7.4. An app may be able to access sensitive user data.
EPSS 0.22% · 12.2th percentile
Risk Scores
CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS Score
0.22%
12.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| apple | macos | 0, 13.0 |
| Apple | macOS | unspecified, * |
Timeline
- Jun 10, 2024 CVE Published
- Jun 11, 2024 EPSS Score
- Jul 4, 2024 EPSS Score
- Jul 27, 2024 EPSS Score
- Aug 19, 2024 EPSS Score
- Sep 11, 2024 EPSS Score
- Oct 4, 2024 EPSS Score
- Oct 27, 2024 EPSS Score
- Nov 19, 2024 EPSS Score
- Dec 14, 2024 EPSS Score
- Jan 6, 2025 EPSS Score
- Jan 29, 2025 EPSS Score
References
- https://support.apple.com/kb/HT214041 technical
- https://support.apple.com/en-us/HT214083 url
- https://support.apple.com/en-us/HT214085 url
- https://support.apple.com/kb/HT214040 url
- https://support.apple.com/kb/HT214036 url
- https://support.apple.com/kb/HT214035 url
- https://support.apple.com/kb/HT214085 url
- https://support.apple.com/kb/HT214083 url
- https://nvd.nist.gov/vuln/detail/CVE-2023-40389 advisory