Security Resilience

CVE-2023-42836

Apple Macos 12.0 – 12.7.2

Published
21 February 2024
Modified
04 November 2025
Patch / advisory
View advisory
CVSS Score v3.1 5.3
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS Score 0.0053 44th percentile
Risk Priority 45 floored blend · peak EPSS

CVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.

Summary

CVE-2023-42836 is a medium-severity an unspecified weakness vulnerability in Apple Macos. Its CVSS base score is 5.3 (Medium).

Operationally, ranked at the 44th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability Data

A logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS Ventura 13.6.3, macOS Sonoma 14.1, macOS Monterey 12.7.2. An attacker may be able to access connected network volumes mounted in the…

more

home directory.

CWE(s)
NVD-CWE-noinfo

Related Threats

CVEs Like This One

CVE-2024-23242Same product: Apple Ipad Os
CVE-2024-23205Same product: Apple Ipad Os
CVE-2024-23255Same product: Apple Ipad Os
CVE-2023-42952Same product: Apple Ipad Os
CVE-2024-23277Same product: Apple Ipad Os
CVE-2023-42977Same product: Apple Ipad Os
CVE-2023-42873Same product: Apple Ipad Os
CVE-2024-23273Same product: Apple Ipad Os
CVE-2023-42834Same product: Apple Ipad Os
CVE-2024-23241Same product: Apple Ipad Os

Affected Assets

apple
ipad os
≤ 17.1
apple
iphone os
≤ 17.1
apple
macos
14.0 · 12.0 — 12.7.2 · 13.0 — 13.6.3

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References