CVE-2023-27960

2023-05-0800:00:00

apple

www.cve.org

vulnerability

fixed

garageband

macos

privilege elevation

installation

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.9%

JSON

This issue was addressed by removing the vulnerable code. This issue is fixed in GarageBand for macOS 10.4.8. An app may be able to gain elevated privileges during the installation of GarageBand.

CNA Affected

[
  {
    "vendor": "Apple",
    "product": "macOS",
    "versions": [
      {
        "version": "unspecified",
        "status": "affected",
        "lessThan": "10.4",
        "versionType": "custom"
      }
    ]
  }
]

References

support.apple.com/en-us/HT213650