VULNERABILITY INTELLIGENCE

CVE-2023-40425

CVSS score4.4 MEDIUM
EPSS probability0.33%
CISA KEVNot currently listed
Published2023-10-25
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Description

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma 14, macOS Monterey 12.7.1. An app with root privileges may be able to access private information.

Weakness classification

  • nvd@nist.gov: CWE-532
  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-532

Primary references