CVE-2023-42932
First published: Mon Dec 11 2023(Updated: )
A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.2, macOS Ventura 13.6.3, macOS Monterey 12.7.2. An app may be able to access protected user data.
Credit: Zhongquan Li @Guluisacat Zhongquan Li @Guluisacat Zhongquan Li @Guluisacat product-security@apple.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apple macOS | >=12.0<12.7.2 | |
| Apple macOS | >=13.0<13.6.3 | |
| Apple macOS | >=14.0<14.2 | |
| Apple macOS Monterey | <12.7.2 | 12.7.2 |
| Apple macOS Ventura | <13.6.3 | 13.6.3 |
| Apple macOS Sonoma | <14.2 | 14.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://seclists.org/fulldisclosure/2023/Dec/10
- http://seclists.org/fulldisclosure/2023/Dec/11
- http://seclists.org/fulldisclosure/2023/Dec/9
- https://support.apple.com/en-us/HT214036 (Advisory)
- https://support.apple.com/en-us/HT214037 (Advisory)
- https://support.apple.com/en-us/HT214038 (Advisory)
- https://support.apple.com/kb/HT214037
- https://support.apple.com/kb/HT214036
Peer vulnerabilities
(Found alongside the following vulnerabilities)
- CVE-2023-42919
- CVE-2023-42894
- CVE-2023-42896
- CVE-2023-42886
- CVE-2023-42931
- CVE-2023-41989
- CVE-2023-42892
- CVE-2023-42922
- CVE-2023-42834
- CVE-2023-42899
- CVE-2023-42891
- CVE-2023-42974
- CVE-2023-42914
- CVE-2023-42893
- CVE-2023-3618
- CVE-2020-19185
- CVE-2020-19186
- CVE-2020-19187
- CVE-2020-19188
- CVE-2020-19189
- CVE-2020-19190
- CVE-2023-42838
- CVE-2023-42836
- CVE-2023-42936
- CVE-2023-42930
- CVE-2023-42932
- CVE-2023-42947
- CVE-2023-5344
- CVE-2023-42874
- CVE-2023-42937
- CVE-2023-42901
- CVE-2023-42902
- CVE-2023-42912
- CVE-2023-42903
- CVE-2023-42904
- CVE-2023-42905
- CVE-2023-42906
- CVE-2023-42907
- CVE-2023-42908
- CVE-2023-42909
- CVE-2023-42910
- CVE-2023-42911
- CVE-2023-42926
- CVE-2023-42882
- CVE-2023-42881
- CVE-2023-42924
- CVE-2023-42884
- CVE-2023-45866
- CVE-2023-42900
- CVE-2023-38545
- CVE-2023-38039
- CVE-2023-38546
- CVE-2023-42898
- CVE-2023-42888
- CVE-2023-42887
- CVE-2023-40390
- CVE-2023-42842
- CVE-2023-42913
- CVE-2023-40389
- CVE-2023-42890
- CVE-2023-42883
- CVE-2023-42950
- CVE-2023-42956
- CVE-2023-42952
- collector/nvd-api
- agent/event
- agent/type
- agent/softwarecombine
- agent/first-publish-date
- agent/author
- agent/severity
- agent/description
- collector/apple-support
- source/Apple
- agent/software-canonical-lookup
- agent/references
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/apple
- canonical/apple macos
- version/apple macos/12.0
- version/apple macos/13.0
- version/apple macos/14.0
- canonical/apple macos monterey
- canonical/apple macos sonoma
- canonical/apple macos ventura