CVE-2023-23506

Medium

5.5/10

Summary

A permissions issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.2. An app may be able to access user-sensitive data.

Attack Complexity: LOW
Attack Vector: LOCAL
Integrity Impact: NONE
Scope: UNCHANGED
User Interaction: REQUIRED
Privileges Required: NONE
Confidentiality Impact: HIGH
Availability Impact: NONE

References

Advisory Timeline

Published Feb 27, 2023

CVE-2023-23506

Summary

References

Advisory Timeline

ChainJacking

JetBrains IDE

KICS SaaS