VulnerabilityModified
CVE-2023-40454
A permissions issue was addressed with additional restrictions.
HIGH 7.1EPSS 0.36%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.36%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to delete files for which it does not have permission.
- CVSS 3.1
- 7.1 HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
- EPSS
- 0.36% probability · 30th percentile
- CISA KEV
- Not listed
- Affected
- apple/ipados · apple/iphone os · apple/macos · apple/tvos · apple/watchos
- Source
- product-security@apple.com
References
- http://seclists.org/fulldisclosure/2023/Oct/10Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2023/Oct/3
- http://seclists.org/fulldisclosure/2023/Oct/4
- http://seclists.org/fulldisclosure/2023/Oct/5Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2023/Oct/6
- http://seclists.org/fulldisclosure/2023/Oct/8
- https://support.apple.com/en-us/HT213927Vendor Advisory
- https://support.apple.com/en-us/HT213931Vendor Advisory
- https://support.apple.com/en-us/HT213932Vendor Advisory
- https://support.apple.com/en-us/HT213936Vendor Advisory
- https://support.apple.com/en-us/HT213937Vendor Advisory
- https://support.apple.com/en-us/HT213938Vendor Advisory
- https://support.apple.com/en-us/HT213940Vendor Advisory
- http://seclists.org/fulldisclosure/2023/Oct/10Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2023/Oct/3
- http://seclists.org/fulldisclosure/2023/Oct/4
- http://seclists.org/fulldisclosure/2023/Oct/5Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2023/Oct/6
- http://seclists.org/fulldisclosure/2023/Oct/8
- https://support.apple.com/en-us/HT213927Vendor Advisory
- https://support.apple.com/en-us/HT213931Vendor Advisory
- https://support.apple.com/en-us/HT213932Vendor Advisory
- https://support.apple.com/en-us/HT213936Vendor Advisory
- https://support.apple.com/en-us/HT213937Vendor Advisory
- https://support.apple.com/en-us/HT213938Vendor Advisory
- https://support.apple.com/en-us/HT213940Vendor Advisory
- https://support.apple.com/kb/HT213927
- https://support.apple.com/kb/HT213931
- https://support.apple.com/kb/HT213932
- https://support.apple.com/kb/HT213936
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.