CVE-2023-38609
HighCVSS 7.5Exploitation Probability (EPSS)
Elevated risk55th percentile - higher than 55% of all known CVEs
Summary
An injection issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13.5, where an app may be able to bypass certain Privacy preferences.
Risk Assessment
The organization may be exposed to user privacy breaches, potentially leading to unauthorized access to data.
Recommendation
It is recommended to update the system to macOS Ventura 13.5 to mitigate this issue.
Other vulnerabilities in macOS Ventura
See all- CVE-2023-38608Medium
The issue was addressed with additional permissions checks. An app may be able to access user-sensitive data.
- CVE-2023-38564High
The issue was addressed with improved checks. An app may be able to modify protected parts of the file system.
- CVE-2023-36862Medium
A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Ventura 13.5.
Original NVD description (English source)
An injection issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13.5. An app may be able to bypass certain Privacy preferences.