CVE-2023-38565

HighCVSS 7.8

Published: 27/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.21%

11th percentile - higher than 11% of all known CVEs

Summary

A path handling issue was addressed with improved validation. An app may be able to gain root privileges.

Risk Assessment

The risk is that a malicious app could gain unauthorized access to the system, potentially leading to serious security breaches.

Recommendation

It is recommended to update systems to the latest versions to mitigate the risk associated with this vulnerability.

Other vulnerabilities in macOS Monterey, iOS, iPadOS, macOS Big Sur, macOS Ventura, watchOS

CVE-2023-38593Medium
A logic issue was addressed with improved checks in macOS and iOS. An app may be able to cause a denial-of-service.

Original NVD description (English source)

A path handling issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.6.8, iOS 16.6 and iPadOS 16.6, macOS Big Sur 11.7.9, macOS Ventura 13.5, watchOS 9.6. An app may be able to gain root privileges.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS