High · 7.8 CVE-2023-42977 EUVD-2023-47398GHSA-m6p7-g6ff-wxw5

A path handling issue was addressed with improved validation. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be a…

Published Apr 11, 2025 · Updated Feb 26, 2026 · Assigned by apple

Vendor: Apple Product: iOS and iPadOS Product: macOS Platform: iOS Platform: macOS

Description

A path handling issue was addressed with improved validation. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to break out of its sandbox.

Affected products

Vendor	Product	Affected	Fixed
Apple	iOS and iPadOS	unspecified – < 17	17
Apple	macOS	unspecified – < 14	14

Advisories 2

WID-SEC-2023-2454 Apple iOS und iPadOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 5, 2026
WID-SEC-2023-2453 Apple macOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Apr 13, 2025

References

https://support.apple.com/en-us/120949
https://support.apple.com/en-us/120950

EUVD	v3.1	7.8
CISA-ADP	v3.1	7.8