CVE-2023-40400

Published: Sep 27, 2023Modified: Nov 4, 2025

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

This issue was addressed with improved checks. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. A remote user may cause an unexpected app termination or arbitrary code execution.

Affected (5)

Products: Apple: Ipados, Iphone Os, Macos, Tvos, Watchos

5 products

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Apple Ipados	Before 16.6
Apple Iphone Os	Before 16.6
Apple Macos	Before 14.0
Apple Tvos	Before 17.0
Apple Watchos	Before 10.0

References (22)

http://seclists.org/fulldisclosure/2023/Oct/10

Source: product-security@apple.com

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2023/Oct/3

Source: product-security@apple.com

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2023/Oct/8

Source: product-security@apple.com

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2023/Oct/9

Source: product-security@apple.com

Mailing ListThird Party Advisory

https://support.apple.com/en-us/HT213936

Source: product-security@apple.com

Release NotesVendor Advisory

https://support.apple.com/en-us/HT213937

Source: product-security@apple.com

Release NotesVendor Advisory

https://support.apple.com/en-us/HT213938

Source: product-security@apple.com

Release NotesVendor Advisory

https://support.apple.com/en-us/HT213940

Source: product-security@apple.com

Release NotesVendor Advisory

https://support.apple.com/kb/HT213841

Source: product-security@apple.com

Release NotesVendor Advisory

http://seclists.org/fulldisclosure/2023/Oct/10