Security Resilience

CVE-2023-27960

Apple Mac Os X 10.0 – 10.4.8

Published
08 May 2023
Modified
29 January 2025
Patch / advisory
View advisory
CVSS Score v3.1 7.8
Click a component to see what it means
Raw vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score 0.0022 12th percentile
Risk Priority 55 floored blend · peak EPSS

CVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.

Summary

CVE-2023-27960 is a high-severity an unspecified weakness vulnerability in Apple Mac Os X. Its CVSS base score is 7.8 (High).

Operationally, ranked at the 12th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability Data

This issue was addressed by removing the vulnerable code. This issue is fixed in GarageBand for macOS 10.4.8. An app may be able to gain elevated privileges during the installation of GarageBand.

CWE(s)
NVD-CWE-noinfo

Related Threats

CVEs Like This One

CVE-2015-1130Same product: Apple Mac Os X
CVE-2019-8526Same product: Apple Mac Os X
CVE-2022-22674Same product: Apple Mac Os X
CVE-2021-30657Same product: Apple Mac Os X
CVE-2021-30713Same product: Apple Mac Os X
CVE-2019-6223Same product: Apple Mac Os X
CVE-2019-7286Same product: Apple Mac Os X
CVE-2020-9934Same product: Apple Mac Os X
CVE-2014-4404Same product: Apple Mac Os X
CVE-2021-30869Same product: Apple Mac Os X

Affected Assets

apple
mac os x
10.0 — 10.4.8

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References