VDB
GHSA-cf7h-9gmr-x446
GHSA-cf7h-9gmr-x446
PUBLISHED
CVSS 5.5 MEDIUM
Record from GitHub Advisory Database · Published December 12, 2023
A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.2, macOS Ventura 13.6.3, macOS Monterey 12.7.2. An app may be able to access protected user data.
Risk scores
CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Timeline
- Dec 12, 2023 CVE Published
- Apr 10, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-cf7h-9gmr-x446
vulnetix vdb fixes GHSA-cf7h-9gmr-x446Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-cf7h-9gmr-x446/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://support.apple.com/en-us/HT214036 url
- https://support.apple.com/en-us/HT214037 url
- https://support.apple.com/kb/HT214036 url
- https://support.apple.com/kb/HT214037 url
- https://support.apple.com/kb/HT214038 url
- http://seclists.org/fulldisclosure/2023/Dec/10 url
- http://seclists.org/fulldisclosure/2023/Dec/9 url
- https://nvd.nist.gov/vuln/detail/CVE-2023-42932 advisory
- https://support.apple.com/en-us/HT214038 url
- http://seclists.org/fulldisclosure/2023/Dec/11 url