CVE-2023-40406

The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7, macOS Ventura 13.6, macOS Sonoma 14. An app may be able to read arbitrary files.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.5 MEDIUM
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
appleCNA
---
---
CVEADP
---
---
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 11%
VendorProductVersion
applemacos
12.0.0 ≤
𝑥
< 12.7
applemacos
13.0 ≤
𝑥
< 13.6
𝑥
= Vulnerable software versions
References
http://seclists.org/fulldisclosure/2023/Oct/3
http://seclists.org/fulldisclosure/2023/Oct/5
http://seclists.org/fulldisclosure/2023/Oct/6
https://support.apple.com/en-us/HT213931
https://support.apple.com/en-us/HT213932
https://support.apple.com/en-us/HT213940
http://seclists.org/fulldisclosure/2023/Oct/3
http://seclists.org/fulldisclosure/2023/Oct/5
http://seclists.org/fulldisclosure/2023/Oct/6
https://support.apple.com/en-us/HT213931
https://support.apple.com/en-us/HT213932
https://support.apple.com/en-us/HT213940
https://support.apple.com/kb/HT213931
https://support.apple.com/kb/HT213932
https://support.apple.com/kb/HT213940