Threat database

46 threats

Severity	CVSS	Signals	Threat	Source	Published
High	–	EPSS 0.3%	CVE-2023-41079Apple macOS · An app may be able to bypass Privacy preferences HighEPSS 0.3%2023-09-26CVE Database V5CVE-2023-41079 CVE-2023-41079 is a vulnerability in Apple macOS that allows an app to potentially bypass Privacy preferences. The issue was addressed by Apple with improved permissions logic and is fixed in macOS Sonoma 14. Versions prior to 14 are affected. EPSS 0.3%Vulnerability	CVE Database V5	2023-09-26
Medium	–	EPSS 0.3%	CVE-2023-40426Apple macOS · An app may be able to bypass certain Privacy preferences MediumEPSS 0.3%2023-09-26CVE Database V5CVE-2023-40426 CVE-2023-40426 is a permissions vulnerability in Apple macOS that could allow an app to bypass certain Privacy preferences. This issue was addressed with additional restrictions and fixed in macOS Sonoma 14. EPSS 0.3%Vulnerability	CVE Database V5	2023-09-26
Medium	–	EPSS 0.3%	CVE-2023-40386Apple macOS · An app may be able to access Notes attachments MediumEPSS 0.3%2023-09-26CVE Database V5CVE-2023-40386 CVE-2023-40386 is a privacy vulnerability in Apple macOS where an app may be able to access Notes attachments due to insufficient handling of temporary files. This issue has been fixed in macOS Sonoma 14. EPSS 0.3%Vulnerability	CVE Database V5	2023-09-26
High	–	EPSS 0.2%	CVE-2023-41979Apple macOS · An app may be able to modify protected parts of the file system HighEPSS 0.2%2023-09-26CVE Database V5CVE-2023-41979 CVE-2023-41979 is a vulnerability in Apple macOS where a race condition could allow an application to modify protected parts of the file system. This issue has been addressed by improved locking mechanisms and is fixed in macOS Sonoma 14. EPSS 0.2%Vulnerability	CVE Database V5	2023-09-26
High	–	EPSS 0.3%	CVE-2023-32395Apple macOS · Out-of-bounds Write HighEPSS 0.3%2023-06-23CVE Database V5CVE-2023-32395 CVE-2023-32395 is a logic flaw in Apple macOS that could allow an application to modify protected parts of the file system. This issue was addressed by improved state management and fixed in macOS Big Sur 11.7.7, Monterey 12.6.6, and Ventura 13.4. The vulnerability affects versions prior to these releases. EPSS 0.3%Vulnerability CWE-787	CVE Database V5	2023-06-23
High	7.8	EPSS 0.6%	CVE-2022-32840Apple macOS · Improper Privilege Management High7.8EPSS 0.6%2022-08-24CVE Database V5CVE-2022-32840 This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.5, watchOS 8.7, iOS 15.6 and iPadOS 15.6. An app may be able to execute arbitrary code with kernel privileges. EPSS 0.6%Vulnerability CWE-269	CVE Database V5	2022-08-24

Page 3 of 3