CVE-2023-40389

2024-06-1019:21:22

apple

github.com

cve-2023-40389

data container access

macos ventura

macos monterey

sensitive user data

5.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

20.9%

JSON

The issue was addressed with improved restriction of data container access. This issue is fixed in macOS Ventura 13.6.5, macOS Monterey 12.7.4. An app may be able to access sensitive user data.

CNA Affected

[
  {
    "vendor": "Apple",
    "product": "macOS",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified",
        "lessThan": "12.7",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Apple",
    "product": "macOS",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified",
        "lessThan": "13.6",
        "versionType": "custom"
      }
    ]
  }
]