CVE-2023-36854

HighCVSS 7.8

Published: 27/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.30%

21th percentile - higher than 21% of all known CVEs

Summary

The issue was addressed with improved checks. Processing a file may lead to unexpected app termination or arbitrary code execution.

Risk Assessment

The organization may be exposed to unauthorized code execution, potentially leading to data loss or system takeover.

Recommendation

It is recommended to update the system to macOS Monterey 12.6.8, macOS Ventura 13.5, or macOS Big Sur 11.7.9 to mitigate this vulnerability.

Other vulnerabilities in macOS Monterey, macOS Ventura, macOS Big Sur

CVE-2023-38259Medium
A logic issue was identified in macOS that could allow apps to access user-sensitive data. This issue is fixed in macOS Monterey 12.6.8, macOS Ventura 13.5, and macOS Big Sur 11.7.9.

Original NVD description (English source)

The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.6.8, macOS Ventura 13.5, macOS Big Sur 11.7.9. Processing a file may lead to unexpected app termination or arbitrary code execution.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS