CVE-2023-27967

Published May 8, 2023

Last updated a year ago

Overview

Description: The issue was addressed with improved memory handling. This issue is fixed in Xcode 14.3. An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges.
Source: product-security@apple.com
NVD status: Modified

Risk scores

CVSS 3.1

Type: Primary
Base score: 8.6
Impact score: 6
Exploitability score: 1.8
Vector string: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Severity: HIGH

Weaknesses

nvd@nist.gov: NVD-CWE-noinfo

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:apple:xcode:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "37EC667B-49B0-4210-9B73-9795D603EF78",
            "versionEndExcluding": "14.3"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References