PT-2023-4267 · Apple · Apple Macos

Gergely Kalman + 1 · Published 2023-07-24 · Updated 2024-11-07 · CVE-2023-32364

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions macOS versions prior to 13.5

Description A logic issue was addressed with improved restrictions, allowing a sandboxed process to potentially circumvent sandbox restrictions. This issue is related to errors in security settings of the AppSandbox component in macOS, which may enable an attacker to bypass the protective mechanism of the isolated program environment.

Recommendations For versions prior to 13.5, update to macOS Ventura 13.5 to resolve the issue. As a temporary workaround, consider restricting access to sandboxed processes until the update is applied.

Exploit

Fix

Weakness Enumeration

CWE-254

Related Identifiers

BDU:2023-04584

CVE-2023-32364

Affected Products

Apple Macos

References · 22

• 🔥 https://github.com/gergelykalman/CVE-2023-32364-macos-app-sandbox-escape · Exploit
• https://support.apple.com/en-us/HT213843 · Vendor Advisory
• https://support.apple.com/kb/HT213845 · Vendor Advisory
• https://support.apple.com/kb/HT213844 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-04584 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-32364 · Security Note
• https://osv.dev/vulnerability/CVE-2023-32364 · Vendor Advisory
• https://twitter.com/ptracesecurity/status/1707462704309395570 · Twitter Post
• https://twitter.com/Din3zh/status/1707068698203177307 · Twitter Post
• https://twitter.com/patch1t/status/1854365131804913706 · Twitter Post
• https://twitter.com/gothburz/status/1707520664440033549 · Twitter Post
• https://support.apple.com/en-us/HT213844 · Note
• https://support.apple.com/en-us/120334 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32364 · Note
• https://twitter.com/gergely_kalman/status/1706683230005362870 · Twitter Post