PT-2023-18991 · Apple · Macos Monterey+7

Cees Elzinga · Published 2023-01-23 · Updated 2025-03-11 · CVE-2023-23499

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions macOS Big Sur versions prior to 11.7.3 macOS Monterey versions prior to 12.6.3 macOS Ventura versions prior to 13.2 watchOS versions prior to 9.3 tvOS versions prior to 16.3 iOS versions prior to 16.3 iPadOS versions prior to 16.3

Description This issue allows an app to access user-sensitive data. The issue was addressed by enabling hardened runtime.

Recommendations For macOS Big Sur, update to version 11.7.3 to resolve the issue. For macOS Monterey, update to version 12.6.3 to resolve the issue. For macOS Ventura, update to version 13.2 to resolve the issue. For watchOS, update to version 9.3 to resolve the issue. For tvOS, update to version 16.3 to resolve the issue. For iOS, update to version 16.3 to resolve the issue. For iPadOS, update to version 16.3 to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2023-23499

Affected Products

Apple Macos

Ios

Ipados

Macos Big Sur

Macos Monterey

Macos Ventura

Tvos

Watchos

References · 11

• https://osv.dev/vulnerability/CVE-2023-23499 · Vendor Advisory
• https://support.apple.com/en-us/HT213599 · Vendor Advisory
• https://support.apple.com/en-us/HT213604 · Vendor Advisory
• https://support.apple.com/en-us/HT213605 · Vendor Advisory
• https://support.apple.com/en-us/HT213603 · Vendor Advisory
• https://support.apple.com/en-us/HT213601 · Vendor Advisory
• https://support.apple.com/en-us/HT213606 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-23499 · Security Note
• https://t.me/cvenotify/114213 · Telegram Post
• https://t.me/cvenotify/45835 · Telegram Post
• https://t.me/cibsecurity/59056 · Telegram Post