Cyber Resilience

CVE-2023-27967

Apple Xcode ≤ 14.3

Published
08 May 2023
Modified
29 January 2025
Patch / advisory
View advisory
CVSS Score v3.1 8.6
Click a component to see what it means
Raw vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
EPSS Score 0.0023 14th percentile
Risk Priority 59 floored blend · peak EPSS

CVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.

Summary

CVE-2023-27967 is a high-severity an unspecified weakness vulnerability in Apple Xcode. Its CVSS base score is 8.6 (High).

Operationally, ranked at the 14th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability Data

The issue was addressed with improved memory handling. This issue is fixed in Xcode 14.3. An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges.

CWE(s)
NVD-CWE-noinfo

Related Threats

CVEs Like This One

CVE-2024-44162Same product: Apple Xcode
CVE-2024-23298Same product: Apple Xcode
CVE-2025-31186Same product: Apple Xcode
CVE-2025-43370Same product: Apple Xcode
CVE-2023-40435Same product: Apple Xcode
CVE-2023-27945Same product: Apple Xcode
CVE-2025-43263Same product: Apple Xcode
CVE-2024-44228Same product: Apple Xcode
CVE-2024-40862Same product: Apple Xcode
CVE-2026-28890Same product: Apple Xcode

Affected Assets

apple
xcode
≤ 14.3

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References