CVE-2023-42889

Published: Feb 21, 2024Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, macOS Ventura 13.6.1. An app may be able to bypass certain Privacy preferences.

Affected (3)

Products: Apple: Macos

Apple

1 product

Macos

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Apple Macos	From 12.0 to 12.7.1
Apple Macos	From 13.0 to 13.6.1
Apple Macos	Version 14.0

Related CWEs

CWE-290

Authentication Bypass by Spoofing

This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.

References (8)

https://support.apple.com/en-us/HT213983

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/en-us/HT213984

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/en-us/HT213985

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/en-us/HT213983