CVE-2023-27960

4 documents4 sources
Severity
7.8HIGH
EPSS
0.1%
top 67.69%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Apple MacosApple MAC OS X
Timeline
PublishedMay 8

Description

This issue was addressed by removing the vulnerable code. This issue is fixed in GarageBand for macOS 10.4.8. An app may be able to gain elevated privileges during the installation of GarageBand.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5apple/macosunspecified — 10.4
▶NVDapple/mac_os_x10.0 — 10.4.8

🔴Vulnerability Details

2
CVEList
CVE-2023-27960: This issue was addressed by removing the vulnerable code↗2023-05-08
▶
GHSA
GHSA-587p-wh25-6v5g: This issue was addressed by removing the vulnerable code↗2023-05-08
▶

📋Vendor Advisories

1
Apple
CVE-2023-27960: GarageBand for macOS 10.4.8↗2023-03-07
▶