VULNERABILITY INTELLIGENCE

CVE-2023-42974

CVSS score7 HIGH
EPSS probability0.15%
CISA KEVNot currently listed
Published2024-03-28
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

A race condition was addressed with improved state handling. This issue is fixed in macOS Monterey 12.7.2, macOS Ventura 13.6.3, iOS 17.2 and iPadOS 17.2, iOS 16.7.3 and iPadOS 16.7.3, macOS Sonoma 14.2. An app may be able to execute arbitrary code with kernel privileges.

Weakness classification

  • nvd@nist.gov: CWE-362
  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-362

Primary references