TROYANOSYVIRUS
Back to CVEs

CVE-2023-32396

HIGH
7.8

Description

This issue was addressed with improved checks. This issue is fixed in Xcode 15, tvOS 17, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to gain elevated privileges.

CVE Details

CVSS v3.1 Score7.8
SeverityHIGH
CVSS VectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack VectorLOCAL
ComplexityLOW
Privileges RequiredNONE
User InteractionREQUIRED
Published9/27/2023
Last Modified11/4/2025
Sourcenvd
Honeypot Sightings0

Affected Products

apple:ipadosapple:iphone_osapple:macosapple:tvosapple:watchosapple:xcode

References

https://support.apple.com/en-us/HT213936(product-security@apple.com)
https://support.apple.com/en-us/HT213937(product-security@apple.com)
https://support.apple.com/en-us/HT213938(product-security@apple.com)
https://support.apple.com/en-us/HT213939(product-security@apple.com)
https://support.apple.com/en-us/HT213940(product-security@apple.com)
http://seclists.org/fulldisclosure/2023/Oct/10(af854a3a-2127-422b-91ae-364da2661108)
http://seclists.org/fulldisclosure/2023/Oct/3(af854a3a-2127-422b-91ae-364da2661108)
http://seclists.org/fulldisclosure/2023/Oct/7(af854a3a-2127-422b-91ae-364da2661108)
http://seclists.org/fulldisclosure/2023/Oct/8(af854a3a-2127-422b-91ae-364da2661108)
http://seclists.org/fulldisclosure/2023/Oct/9(af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/en-us/HT213936(af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/en-us/HT213937(af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/en-us/HT213938(af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/en-us/HT213939(af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/en-us/HT213940(af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/kb/HT213936(af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/kb/HT213937(af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/kb/HT213939(af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/kb/HT213940(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.