CVE-2023-27952 — Race Condition in Apple Macos

CWE-362 — Race Condition4 documents3 sources
Severity
4.7MEDIUMNVD
EPSS
0.0%
top 99.49%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Apple MacosApple Macos SonomaApple Macos Ventura
Timeline
PublishedMay 8
Latest updateJul 29

Description

A race condition was addressed with improved locking. This issue is fixed in macOS Ventura 13.3. An app may bypass Gatekeeper checks.

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:NExploitability: 1.0 | Impact: 3.6

Affected Packages4 packages

▶CVEListV5apple/macosunspecified — 13.3
▶NVDapple/macos< 13.3
▶Appleapple/macos_sonoma14.6

🔴Vulnerability Details

1
GHSA
GHSA-fc7x-6gvp-3rvc: A race condition was addressed with improved locking↗2023-05-08
▶

📋Vendor Advisories

2
Apple
CVE-2023-27952: macOS Sonoma 14.6↗2024-07-29
▶
Apple
CVE-2023-27952: macOS Ventura 13.3↗2023-03-27
▶