CVE-2023-40398
Apple Macos ≤ 11.7.5
CVSS Score v3.1
8.8
Click a component to see what it means
Raw vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
EPSS Score
0.0019
9th percentile
Summary
CVE-2023-40398 is a high-severity an unspecified weakness vulnerability in Apple Macos. Its CVSS base score is 8.8 (High).
Operationally, ranked at the 9th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-44969
Vulnerability Data
This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.6.4, macOS Big Sur 11.7.5, macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4. A sandboxed process may be able to circumvent sandbox restrictions.
- CWE(s)
Related Threats
CVEs Like This One
CVE-2023-27955Same product: Apple Ipados
CVE-2026-28929Same product: Apple Ipados
CVE-2023-23530Same product: Apple Ipados
CVE-2023-23520Same product: Apple Ipados
CVE-2026-28819Same product: Apple Ipados
CVE-2023-40446Same product: Apple Ipados
CVE-2024-40854Same product: Apple Ipados
CVE-2023-38425Same product: Apple Ipados
CVE-2024-27848Same product: Apple Ipados
CVE-2022-22587Same product: Apple Ipados
Affected Assets
apple
ipados
≤ 16.4
apple
iphone os
≤ 16.4
apple
macos
≤ 11.7.5 · 12.0 — 12.6.4 · 13.0 — 13.3
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.