CVE-2023-38564
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk35th percentile - higher than 35% of all known CVEs
Summary
The issue was addressed with improved checks. An app may be able to modify protected parts of the file system.
Risk Assessment
The ability to modify protected areas of the file system could lead to unauthorized changes, posing a serious threat to data integrity.
Recommendation
It is recommended to update to macOS Ventura 13.5 to mitigate this vulnerability.
Other vulnerabilities in macOS Ventura
See all- CVE-2023-38609High
An injection issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13.5, where an app may be able to bypass certain Privacy preferences.
- CVE-2023-38608Medium
The issue was addressed with additional permissions checks. An app may be able to access user-sensitive data.
- CVE-2023-36862Medium
A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Ventura 13.5.
Original NVD description (English source)
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.5. An app may be able to modify protected parts of the file system.