MEDIUM
An authentication issue was addressed with improved state management
Published Dec 12, 2023
5.5
MEDIUMCVSS 3.1
EPSS 0.32%
Description
An authentication issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14.2, macOS Ventura 13.6.3, macOS Monterey 12.7.2. An app may be able to monitor keystrokes without user permission.
Affected products
-
Affected
- ≥ unspecified, < 12.7
- ≥ unspecified, < 13.6
- ≥ unspecified, < 14.2
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (0)
No CWE recorded.
References (10)
- http://seclists.org/fulldisclosure/2023/Dec/10 Mailing ListThird Party Advisory
- http://seclists.org/fulldisclosure/2023/Dec/11 Mailing ListThird Party Advisory
- http://seclists.org/fulldisclosure/2023/Dec/9 Mailing ListThird Party Advisory
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-47312 Advisory
- https://support.apple.com/en-us/HT214036 Release NotesVendor Advisory
- https://support.apple.com/en-us/HT214037 Release NotesVendor Advisory
- https://support.apple.com/en-us/HT214038 Release NotesVendor Advisory
- https://support.apple.com/kb/HT214036
- https://support.apple.com/kb/HT214037
- https://support.apple.com/kb/HT214038
| Link | Providers | Tags |
|---|---|---|
| http://seclists.org/fulldisclosure/2023/Dec/10 | Mailing ListThird Party Advisory | |
| http://seclists.org/fulldisclosure/2023/Dec/11 | Mailing ListThird Party Advisory | |
| http://seclists.org/fulldisclosure/2023/Dec/9 | Mailing ListThird Party Advisory | |
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-47312 | Advisory | |
| https://support.apple.com/en-us/HT214036 | Release NotesVendor Advisory | |
| https://support.apple.com/en-us/HT214037 | Release NotesVendor Advisory | |
| https://support.apple.com/en-us/HT214038 | Release NotesVendor Advisory | |
| https://support.apple.com/kb/HT214036 | ||
| https://support.apple.com/kb/HT214037 | ||
| https://support.apple.com/kb/HT214038 |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner apple
Published Dec 12, 2023
Updated Nov 4, 2025
Reserved Sep 14, 2023
Link CVE-2023-42891
CISA Vulnrichment
No data
Red Hat
No data
GitHub
No data