CVE-2023-23522: A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Ventura 13.2.1. An app may be able to observe unprotected…

PriorityP279medium5.5CVSS 3.1

AVLACLPRNUIRSUCHINAN

ITWVulnCheck KEV

Exploited in the wild

EPSS

0.29%

21.0th percentile

A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Ventura 13.2.1. An app may be able to observe unprotected user data.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
apple	macos	< 13.2	13.2
apple	macos	>= unspecified < 13.2	13.2
apple	macos_ventura	—	—

Detection & IOCsextracted from sources · hover to see the quote

→Vulnerable component is Shortcuts on macOS Ventura prior to 13.2.1; monitor Shortcuts-related processes for unexpected access to temporary files containing user data ↗
→Focus detection on apps observing temporary files created by the macOS Shortcuts component, which may expose unprotected user data ↗

·Fix is only available in macOS Ventura 13.2.1; systems running earlier versions of macOS Ventura remain vulnerable ↗
·The affected component is specifically Shortcuts; other macOS versions (Monterey, Big Sur) are not listed as receiving a fix, scope of impact on those versions is unconfirmed from these sources ↗

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

vulncheck5.5MEDIUM

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.