CVE-2023-38259

Reference Links

• https://support.apple.com/en-us/HT213845 (Advisory)
• https://support.apple.com/en-us/HT213843 (Advisory)
• https://support.apple.com/en-us/HT213844 (Advisory)
• https://support.apple.com/kb/HT213845

Parent vulnerabilities

(Appears in the following advisories)

• HT213845
• HT213844
• HT213843

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2023-40442
• CVE-2023-34425
• CVE-2023-32364
• CVE-2023-35983
• CVE-2023-40392
• CVE-2023-34241
• CVE-2023-28319
• CVE-2023-28320
• CVE-2023-28321
• CVE-2023-28322
• CVE-2023-41990
• CVE-2023-36854
• CVE-2023-32418
• CVE-2023-32381
• CVE-2023-32433
• CVE-2023-35993
• CVE-2023-38603
• CVE-2023-38590
• CVE-2023-38598
• CVE-2023-37285
• CVE-2023-38604
• CVE-2023-38606
• CVE-2023-32441
• CVE-2023-38565
• CVE-2023-38593
• CVE-2023-38571
• CVE-2023-29491
• CVE-2023-38601
• CVE-2023-32444
• CVE-2023-2953
• CVE-2023-42829
• CVE-2023-38259
• CVE-2023-38602
• CVE-2023-42831
• CVE-2023-32443
• CVE-2023-42832
• CVE-2023-32422
• CVE-2023-32429
• CVE-2023-1801
• CVE-2023-2426
• CVE-2023-2609
• CVE-2023-2610
• CVE-2023-32416
• CVE-2023-36495
• CVE-2023-40440
• CVE-2023-38421
• CVE-2023-38258
• CVE-2023-1916
• CVE-2023-32442
• CVE-2023-38605
• CVE-2023-40439
• CVE-2023-38616
• CVE-2023-38580
• CVE-2023-36862
• CVE-2023-42828
• CVE-2023-40437
• CVE-2022-3970
• CVE-2023-28200
• CVE-2023-32734
• CVE-2023-38261
• CVE-2023-38424
• CVE-2023-38425
• CVE-2023-38410
• CVE-2023-38609
• CVE-2023-38564
• CVE-2023-32654
• CVE-2023-38608
• CVE-2023-40397
• CVE-2023-38572
• CVE-2023-38599
• CVE-2023-32445
• CVE-2023-38592
• CVE-2023-38594
• CVE-2023-38595
• CVE-2023-38600
• CVE-2023-38611
• CVE-2023-37450
• CVE-2023-42866
• CVE-2023-38597
• CVE-2023-38133

Frequently Asked Questions

• What is CVE-2023-38259?

  CVE-2023-38259 is a logic issue in PackageKit that has been addressed with improved restrictions.

• How can an app access user-sensitive data due to CVE-2023-38259?

  Due to CVE-2023-38259, an app may be able to access user-sensitive data.

• Which versions of macOS are affected by CVE-2023-38259?

  macOS versions 11.0 to 11.7.9, 12.0 to 12.6.8, and 13.0 to 13.5 are affected by CVE-2023-38259.

• What is the severity of CVE-2023-38259?

  CVE-2023-38259 has a severity value of 5.5, which is considered medium.

• How can I fix CVE-2023-38259?

  To fix CVE-2023-38259, update macOS to the fixed versions: Monterey 12.6.8, Ventura 13.5, or Big Sur 11.7.9.