Medium · 5.9 CVE-2023-23520 EUVD-2023-27620GHSA-p22w-hm7x-wwfc

A race condition was addressed with additional validation. This issue is fixed in watchOS 9.3, tvOS 16.3, macOS Ventura 13.2, iOS 16.3 and …

Published Feb 27, 2023 · Updated Mar 11, 2025 · Assigned by apple

Vendor: Apple Product: iOS and iPadOS Product: macOS Product: tvOS Product: watchOS Platform: iOS Platform: macOS

Description

A race condition was addressed with additional validation. This issue is fixed in watchOS 9.3, tvOS 16.3, macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3. A user may be able to read arbitrary files as root.

Affected products

Vendor	Product	Affected	Fixed
Apple	iOS and iPadOS	unspecified – < 16.3	16.3
Apple	tvOS	unspecified – < 16.3	16.3
Apple	macOS	unspecified – < 13.2	13.2
Apple	watchOS	unspecified – < 9.3	9.3

Advisories 2

WID-SEC-2023-0190 Apple iOS/iPadOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 7, 2023
WID-SEC-2023-0189 Apple macOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 7, 2023

References

https://support.apple.com/en-us/HT213606
https://support.apple.com/en-us/HT213601
https://support.apple.com/en-us/HT213605
https://support.apple.com/en-us/HT213599