Log In Get API Key

7.0High

CVE-2023-42959

Apple macOS; apple mac_os Published: 2024-07-29 23:21 (2 years ago)

Description

A race condition was addressed with improved state handling. This issue is fixed in macOS Sonoma 14. An app may be able to execute arbitrary code with kernel privileges.

Weakness (CWE): CWE-362

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

Vendor	Product	Versions
apple	mac_os	< 14
Apple	macOS	unspecified – < 14

References and patches

https://support.apple.com/en-us/HT213940

CVSS score

7.0High

Source: CISA-ADP · CVSS 3.1

Attack vector: Local
Attack complexity: High
Privileges required: None
User interaction: Required
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: High

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS (chance of exploitation in 30 days)

0.12%

higher than 2% of all CVEs

CISA assessment (SSVC)

Exploitation: none
Automatable: no
Technical impact: total

Timeline

ID reserved2023-09-14
Published2024-07-29 23:21
Reached IP-DB2026-10-24 23:53
Last updated2024-08-02 22:37

Assigned by (CNA): apple

View at source: CVE.org · NVD

Get told when these products get a new vulnerability

Turn on email alerts

Free · with an account · switch off any time

Recent CVEs in the same product — Apple macOS

8.8High

CVE-2026-113970 2 days ago

Apple iOS and iPadOS; Apple macOS; Apple visionOS; Apple watchOS

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, vision…

5.4Medium

CVE-2026-113964 2 days ago

Apple iOS and iPadOS; Apple macOS; Apple visionOS; Apple watchOS

A logic issue was addressed with improved state management. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1,…

5.4Medium

CVE-2026-113965 2 days ago

Apple iOS and iPadOS; Apple macOS; Apple visionOS; Apple watchOS

This issue was addressed with improved checks. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, watchOS 26.6…

5.4Medium

CVE-2026-113968 2 days ago

Apple iOS and iPadOS; Apple macOS; Apple visionOS; Apple watchOS

A logic issue was addressed with improved state management. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1,…

Unscored

CVE-2026-113969 2 days ago

Apple iOS and iPadOS; Apple macOS; Apple visionOS; Apple watchOS

A logic issue was addressed with improved state management. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1,…

Unscored

CVE-2026-113960 2 days ago

Apple iOS and iPadOS; Apple macOS; Apple visionOS; Apple watchOS

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, watchOS 27.2.1. A user added to a…