CVE-2023-36862

MediumCVSS 5.5

Published: 27/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.21%

11th percentile - higher than 11% of all known CVEs

Summary

A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Ventura 13.5.

Risk Assessment

An app may be able to determine a user’s current location, potentially leading to privacy violations.

Recommendation

It is recommended to update the system to macOS Ventura 13.5 to mitigate this vulnerability.

Original NVD description (English source)

A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Ventura 13.5. An app may be able to determine a user’s current location.