Unscored CVE-2023-40401 EUVD-2023-44972GHSA-468w-3r6j-mchw

The issue was addressed with additional permissions checks. This issue is fixed in macOS Ventura 13.6.1. An attacker may be able to access …

Published Oct 25, 2023 · Updated Feb 13, 2025 · Assigned by apple

Vendor: Apple Product: macOS Platform: macOS

Description

The issue was addressed with additional permissions checks. This issue is fixed in macOS Ventura 13.6.1. An attacker may be able to access passkeys without authentication.

Affected products

Vendor	Product	Affected	Fixed
Apple	macOS	unspecified – < 13.6	13.6

Advisories 1

WID-SEC-2023-2753 Apple macOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Feb 29, 2024

References

https://support.apple.com/en-us/HT213985
https://support.apple.com/kb/HT213927
https://support.apple.com/kb/HT213940
https://support.apple.com/kb/HT213938
https://support.apple.com/kb/HT213985
http://seclists.org/fulldisclosure/2023/Oct/26