CVE-2023-42867

This issue was addressed with improved validation of the process entitlement and Team ID

High · published December 20, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
10.6
In the wild
Unconfirmed
What it is

This issue was addressed with improved validation of the process entitlement and Team ID. This issue is fixed in GarageBand 10.4.9. An app may be able to gain root privileges.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00210 · 10.6th percentile
Published
2024-12-20T03:37Z
EPSS history
Timeline
  • 20 DEC 03:37Z
    This issue was addressed with improved validation of the process entitlement and Team ID
    cvelistv5