PT-2023-28651 · Apple · Macos Monterey+7

Guluisacat + 1 · Publicado 2023-12-11 · Atualizado 2025-03-13 · CVE-2023-42947

Positive Technologies (AI Summary)

CVSS v3.1

8.6

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions macOS Monterey versions prior to 12.7.2 macOS Ventura versions prior to 13.6.3 iOS versions prior to 17.2 iPadOS versions prior to 17.2 tvOS versions prior to 17.2 watchOS versions prior to 10.2 macOS Sonoma versions prior to 14.2

Description A path handling issue was addressed with improved validation, which may allow an app to break out of its sandbox.

Recommendations For macOS Monterey, update to version 12.7.2 or later. For macOS Ventura, update to version 13.6.3 or later. For iOS, update to version 17.2 or later. For iPadOS, update to version 17.2 or later. For tvOS, update to version 17.2 or later. For watchOS, update to version 10.2 or later. For macOS Sonoma, update to version 14.2 or later.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2023-42947

Produtos afetados

Apple Macos

Ios

Ipados

Macos Monterey

Macos Sonoma

Macos Ventura

Tvos

Watchos

Referências · 15

• https://support.apple.com/en-us/HT214037 · Aviso do Fabricante
• https://t.me/cvenotify/114670 · Publicação no Telegram
• https://support.apple.com/en-us/HT214036 · Aviso do Fabricante
• https://support.apple.com/kb/HT214040 · Nota
• https://support.apple.com/en-us/HT214040 · Aviso do Fabricante
• https://support.apple.com/kb/HT214037 · Nota
• https://support.apple.com/kb/HT214041 · Nota
• https://osv.dev/vulnerability/CVE-2023-42947 · Aviso do Fabricante
• https://support.apple.com/en-us/HT214038 · Aviso do Fabricante
• https://support.apple.com/en-us/HT214035 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/1773461382425677847 · Publicação no Twitter
• https://support.apple.com/kb/HT214036 · Nota
• https://t.me/cvenotify/75044 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-42947 · Nota de Segurança
• https://support.apple.com/en-us/HT214041 · Aviso do Fabricante