CVE-2023-40406
First published: Thu Sep 21 2023(Updated: )
ColorSync. The issue was addressed with improved checks.
Credit: JeongOhKyea TheoriJeongOhKyea TheoriJeongOhKyea Theori product-security@apple.com product-security@apple.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| <13.6 | 13.6 | |
| <12.7 | 12.7 | |
| <14 | 14 | |
| Apple macOS | >=12.0.0<12.7 | |
| Apple macOS | >=13.0<13.6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://seclists.org/fulldisclosure/2023/Oct/5
- https://support.apple.com/en-us/HT213931 (Advisory)
- https://support.apple.com/en-us/HT213932 (Advisory)
- https://support.apple.com/en-us/HT213940 (Advisory)
- https://support.apple.com/kb/HT213931
- https://support.apple.com/kb/HT213932
- https://support.apple.com/kb/HT213940
- http://seclists.org/fulldisclosure/2023/Oct/6
- http://seclists.org/fulldisclosure/2023/Oct/3
Peer vulnerabilities
(Found alongside the following vulnerabilities)
- CVE-2023-40412
- CVE-2023-40409
- CVE-2023-41071
- CVE-2023-40410
- CVE-2023-38612
- CVE-2023-41232
- CVE-2023-40406
- CVE-2023-40420
- CVE-2023-41984
- CVE-2023-41981
- CVE-2023-41992
- CVE-2023-41073
- CVE-2023-40454
- CVE-2023-40403
- CVE-2023-40427
- CVE-2023-41063
- CVE-2023-40452
- CVE-2023-41996
- CVE-2023-41991
- CVE-2023-41070
- CVE-2023-41968
- CVE-2023-40395
- CVE-2023-40384
- CVE-2023-32377
- CVE-2023-38615
- CVE-2023-40448
- CVE-2023-40432
- CVE-2023-42871
- CVE-2023-40399
- CVE-2023-42872
- CVE-2023-42929
- CVE-2023-42925
- CVE-2023-32361
- CVE-2023-35984
- CVE-2023-40402
- CVE-2023-40426
- CVE-2023-42876
- CVE-2023-41065
- CVE-2023-29497
- CVE-2023-38596
- CVE-2023-42943
- CVE-2023-40528
- CVE-2023-40438
- CVE-2023-41994
- CVE-2023-40407
- CVE-2023-32396
- CVE-2023-42933
- CVE-2023-41980
- CVE-2023-40411
- CVE-2023-40391
- CVE-2023-40441
- CVE-2023-42959
- CVE-2023-23495
- CVE-2023-40434
- CVE-2023-38586
- CVE-2023-40436
- CVE-2023-40396
- CVE-2023-41995
- CVE-2023-42870
- CVE-2023-40429
- CVE-2023-41060
- CVE-2023-41067
- CVE-2023-40400
- CVE-2023-42957
- CVE-2023-32421
- CVE-2023-42826
- CVE-2023-42918
- CVE-2023-41986
- CVE-2023-40455
- CVE-2023-40386
- CVE-2023-38408
- CVE-2023-40401
- CVE-2023-40393
- CVE-2023-42949
- CVE-2023-42934
- CVE-2023-37448
- CVE-2023-38607
- CVE-2023-41987
- CVE-2023-40422
- CVE-2023-39233
- CVE-2023-40388
- CVE-2023-35990
- CVE-2023-40417
- CVE-2023-40430
- CVE-2023-41078
- CVE-2023-40541
- CVE-2023-41079
- CVE-2023-40443
- CVE-2023-40450
- CVE-2023-42948
- CVE-2023-40424
- CVE-2023-39434
- CVE-2023-40414
- CVE-2023-41074
- CVE-2023-35074
- CVE-2023-41993
- CVE-2023-32359
- CVE-2023-40385
- CVE-2023-42833
- CVE-2023-38610
- CVE-2023-41066
- CVE-2023-41979
Frequently Asked Questions
What is CVE-2023-40406?
CVE-2023-40406 is a vulnerability in ColorSync that has been addressed with improved checks.
Which software is affected by CVE-2023-40406?
macOS Sonoma version 14 is affected by CVE-2023-40406.
What is the vendor of the affected software?
The vendor of the affected software is Apple.
How can I fix CVE-2023-40406?
To fix CVE-2023-40406, make sure to update your macOS Sonoma to version 14 or later.
Where can I find more information about CVE-2023-40406?
You can find more information about CVE-2023-40406 at the following link: https://support.apple.com/en-us/HT213940
- collector/nvd-index
- collector/nvd-api
- agent/first-publish-date
- agent/type
- agent/softwarecombine
- collector/apple-support
- source/Apple
- agent/software-canonical-lookup
- agent/event
- agent/description
- agent/author
- agent/severity
- agent/references
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/apple
- canonical/apple macos
- version/apple macos/12.0.0
- version/apple macos/13.0
- canonical/apple macos ventura
- canonical/apple macos monterey
- canonical/apple macos sonoma