CVE-2023-40389

The issue was addressed with improved restriction of data container access. This issue is fixed in macOS Ventura 13.6.5, macOS Monterey 12.7.4. An app may be able to access sensitive user data.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.5 MEDIUM
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
appleCNA
---
---
CISA-ADPADP
5.5 MEDIUM
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 22%
VendorProductVersion
applemacos
𝑥
< 12.7.4
applemacos
13.0 ≤
𝑥
< 13.6.5
𝑥
= Vulnerable software versions
References
https://support.apple.com/en-us/HT214083
https://support.apple.com/en-us/HT214085
https://support.apple.com/kb/HT214035
https://support.apple.com/kb/HT214036
https://support.apple.com/kb/HT214040
https://support.apple.com/kb/HT214041
https://support.apple.com/en-us/HT214083
https://support.apple.com/en-us/HT214085
https://support.apple.com/kb/HT214035
https://support.apple.com/kb/HT214036
https://support.apple.com/kb/HT214040
https://support.apple.com/kb/HT214041