CVE-2023-42940 — Sensitive Information Exposure in Apple Macos

CWE-200 — Sensitive Information Exposure3 documents3 sources
Severity
5.7MEDIUMNVD
EPSS
0.2%
top 61.35%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Apple MacosApple Macos Sonoma
Timeline
PublishedDec 19
Latest updateDec 20

Description

A session rendering issue was addressed with improved session tracking. This issue is fixed in macOS Sonoma 14.2.1. A user who shares their screen may unintentionally share the incorrect content.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:NExploitability: 2.1 | Impact: 3.6

Affected Packages3 packages

▶Appleapple/macos_sonoma14.2.1
▶CVEListV5apple/macosunspecified — 14.2
▶NVDapple/macos14.0 — 14.2.1

🔴Vulnerability Details

1
GHSA
GHSA-gx2w-592v-wg4m: A session rendering issue was addressed with improved session tracking↗2023-12-20
▶

📋Vendor Advisories

1
Apple
CVE-2023-42940: macOS Sonoma 14.2.1↗2023-12-19
▶