VulnerabilityModified
CVE-2023-28197
An access issue was addressed with additional sandbox restrictions.
LOW 3.3EPSS 0.38%
Does this matter?
Lower severity and a low EPSS score (0.38%). Track it; it rarely justifies an emergency change on its own.
Description
An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Ventura 13.3, macOS Big Sur 11.7.5, macOS Monterey 12.6.4. An app may be able to access user-sensitive data.
- CVSS 3.1
- 3.3 LOWCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
- EPSS
- 0.38% probability · 32th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-284
- Affected
- apple/macos
- Source
- product-security@apple.com
References
- https://support.apple.com/en-us/HT213670Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213675Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213677Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213670Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213675Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213677Release Notes, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.