CVE-2023-42977

A path handling issue was addressed with improved validation. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to break out of its sandbox.
CVSS

No CVSS.

References
Link Resource
https://support.apple.com/en-us/120949 Release Notes Vendor Advisory
https://support.apple.com/en-us/120950 Release Notes Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:ipad_os:*:*:*:*:*:*:*:*

History

29 Apr 2025, 20:08

Type Values Removed Values Added
References () https://support.apple.com/en-us/120949 - () https://support.apple.com/en-us/120949 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/120950 - () https://support.apple.com/en-us/120950 - Release Notes, Vendor Advisory
First Time Apple macos
Apple ipad Os
Apple
Apple iphone Os
CPE cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:ipad_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

11 Apr 2025, 15:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-04-11 15:15

Updated : 2025-04-29 20:08


NVD link : CVE-2023-42977

Mitre link : CVE-2023-42977


JSON object : View

Products Affected

apple

  • iphone_os
  • ipad_os
  • macos
CWE

No CWE.