CVE-2023-38608
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
The issue was addressed with additional permissions checks. An app may be able to access user-sensitive data.
Risk Assessment
The possibility of unauthorized access to sensitive data may lead to privacy breaches and loss of user trust in the application.
Recommendation
It is recommended to update the system to macOS Ventura 13.5 to mitigate the risk associated with this vulnerability.
Other vulnerabilities in macOS Ventura
See all- CVE-2023-38609High
An injection issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13.5, where an app may be able to bypass certain Privacy preferences.
- CVE-2023-38564High
The issue was addressed with improved checks. An app may be able to modify protected parts of the file system.
- CVE-2023-36862Medium
A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Ventura 13.5.
Original NVD description (English source)
The issue was addressed with additional permissions checks. This issue is fixed in macOS Ventura 13.5. An app may be able to access user-sensitive data.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS