Lucene search

K
vulnrichmentAppleVULNRICHMENT:CVE-2023-41968
HistorySep 26, 2023 - 8:14 p.m.

CVE-2023-41968

2023-09-2620:14:32
apple
github.com
cve-2023-41968
symlink validation
macos ventura 13.6
tvos 17
macos monterey 12.7
watchos 10
ios 17
ipados 17
macos sonoma 14
arbitrary files

AI Score

5.7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Ventura 13.6, tvOS 17, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to read arbitrary files.

AI Score

5.7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2023-41968