CVE-2023-36862
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Ventura 13.5.
Risk Assessment
An app may be able to determine a user’s current location, potentially leading to privacy violations.
Recommendation
It is recommended to update the system to macOS Ventura 13.5 to mitigate this vulnerability.
Other vulnerabilities in macOS Ventura
See all- CVE-2023-38609High
An injection issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13.5, where an app may be able to bypass certain Privacy preferences.
- CVE-2023-38608Medium
The issue was addressed with additional permissions checks. An app may be able to access user-sensitive data.
- CVE-2023-38564High
The issue was addressed with improved checks. An app may be able to modify protected parts of the file system.
Original NVD description (English source)
A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Ventura 13.5. An app may be able to determine a user’s current location.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS