CVE-2023-41968

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Ventura 13.6, tvOS 17, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to read arbitrary files.
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

History

07 Nov 2023, 04:21

Type Values Removed Values Added
References
  • () http://seclists.org/fulldisclosure/2023/Oct/8 -
  • () http://seclists.org/fulldisclosure/2023/Oct/3 -
  • () http://seclists.org/fulldisclosure/2023/Oct/6 -
  • () http://seclists.org/fulldisclosure/2023/Oct/10 -
  • () http://seclists.org/fulldisclosure/2023/Oct/9 -

05 Oct 2023, 13:12

Type Values Removed Values Added
References (MISC) http://seclists.org/fulldisclosure/2023/Oct/5 - (MISC) http://seclists.org/fulldisclosure/2023/Oct/5 - Mailing List, Third Party Advisory

03 Oct 2023, 06:15

Type Values Removed Values Added
References
  • (MISC) http://seclists.org/fulldisclosure/2023/Oct/5 -

28 Sep 2023, 15:35

Type Values Removed Values Added
CWE CWE-59
First Time Apple tvos
Apple macos
Apple ipados
Apple
Apple watchos
Apple iphone Os
References (MISC) https://support.apple.com/en-us/HT213932 - (MISC) https://support.apple.com/en-us/HT213932 - Release Notes, Vendor Advisory
References (MISC) https://support.apple.com/en-us/HT213940 - (MISC) https://support.apple.com/en-us/HT213940 - Release Notes, Vendor Advisory
References (MISC) https://support.apple.com/en-us/HT213938 - (MISC) https://support.apple.com/en-us/HT213938 - Release Notes, Vendor Advisory
References (MISC) https://support.apple.com/en-us/HT213937 - (MISC) https://support.apple.com/en-us/HT213937 - Release Notes, Vendor Advisory
References (MISC) https://support.apple.com/en-us/HT213931 - (MISC) https://support.apple.com/en-us/HT213931 - Release Notes, Vendor Advisory
References (MISC) https://support.apple.com/en-us/HT213936 - (MISC) https://support.apple.com/en-us/HT213936 - Release Notes, Vendor Advisory
CPE cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.5

27 Sep 2023, 15:19

Type Values Removed Values Added
New CVE

Information

Published : 2023-09-27 15:19

Updated : 2023-12-10 15:14


NVD link : CVE-2023-41968

Mitre link : CVE-2023-41968

CVE.ORG link : CVE-2023-41968


JSON object : View

Products Affected

apple

  • tvos
  • watchos
  • macos
  • ipados
  • iphone_os
CWE
CWE-59

Improper Link Resolution Before File Access ('Link Following')