CVE-2023-32444

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A logic issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.7.9, macOS Monterey 12.6.8, macOS Ventura 13.5. A sandboxed process may be able to circumvent sandbox restrictions.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Affected software

Vendor	Product	Versions
Apple	macOS	>= unspecified, < 13.5
Apple	macOS	>= unspecified, < 11.7
Apple	macOS	>= unspecified, < 12.6

References

https://support.apple.com/en-us/HT213843Vendor Advisory
https://support.apple.com/en-us/HT213844Vendor Advisory
https://support.apple.com/en-us/HT213845Vendor Advisory
https://support.apple.com/kb/HT213843Vendor Advisory
https://support.apple.com/kb/HT213844Vendor Advisory
https://support.apple.com/kb/HT213845Vendor Advisory
https://support.apple.com/en-us/HT213843Vendor Advisory
https://support.apple.com/en-us/HT213844Vendor Advisory
https://support.apple.com/en-us/HT213845Vendor Advisory
https://support.apple.com/kb/HT213843Vendor Advisory
https://support.apple.com/kb/HT213844Vendor Advisory
https://support.apple.com/kb/HT213845Vendor Advisory

Timeline

Published: Jul 28, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-324456.1This issue was addressed with improved checks. This issue is fixed in Safari 16.6, watchOS 9.6, iOS 15.7.8 and iPadOS 15.7.8, tvOS 16.6, iOS CVE-2023-324465.5Dell Wyse ThinOS versions prior to 2303 (9.4.1141) contain a sensitive information disclosure vulnerability. An unauthenticated malicious us CVE-2023-324475.5Dell Wyse ThinOS versions prior to 2306 (9.4.2103) contain a sensitive information disclosure vulnerability. A malicious user with local acc CVE-2023-324485.5PowerPath for Windows, versions 7.0, 7.1 & 7.2 contains License Key Stored in Cleartext vulnerability. A local user with access to the insta CVE-2023-324497.8Dell PowerStore versions prior to 3.5 contain an improper verification of cryptographic signature vulnerability. An attacker can trick a hig CVE-2023-32454.8The Floating Chat Widget WordPress plugin before 3.1.2 does not sanitise and escape some of its settings, which could allow high privilege u CVE-2023-324507.8Dell Power Manager, Versions 3.3 to 3.14 contains an Improper Access Control vulnerability. A low-privileged malicious user may potentially CVE-2023-324517.8Dell Display Manager application, version 2.1.1.17, contains a vulnerability that low privilege user can execute malicious code during insta CVE-2023-324533.9Dell BIOS contains an improper authentication vulnerability. A malicious user with physical access to the system may potentially exploit thi CVE-2023-324547.1DUP framework version 4.9.4.36 and prior contains insecure operation on Windows junction/Mount point vulnerability. A local malicious standa CVE-2023-324555.5Dell Wyse ThinOS versions prior to 2208 (9.3.2102) contain a sensitive information disclosure vulnerability. An unauthenticated malicious us CVE-2023-324578.8Dell PowerScale OneFS, versions 8.2.2.x-9.5.0.x, contains an improper privilege management vulnerability. A remote attacker with low privile