Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
CVE-2023-38601: This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Big Sur 11.7.9, macOS Monterey 12.6.8, macOS Ventura 13.5. An app may be able to modify protected parts of the...
CVE-2023-38601 · published 3 years ago
Summary
This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Big Sur 11.7.9, macOS Monterey 12.6.8, macOS Ventura 13.5. An app may be able to modify protected parts of the file system.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| apple | macos |
< 11.7.9 >= 12.0, < 12.6.8 >= 13.0, < 13.5 cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* |
Original advisory text
This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Big Sur 11.7.9, macOS Monterey 12.6.8, macOS Ventura 13.5. An app may be able to modify protected parts of the...
This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Big Sur 11.7.9, macOS Monterey 12.6.8, macOS Ventura 13.5. An app may be able to modify protected parts of the file system.
References
- https://support.apple.com/en-us/HT213843 Vendor Advisory
- https://support.apple.com/en-us/HT213844 Vendor Advisory
- https://support.apple.com/en-us/HT213845 Vendor Advisory
- https://support.apple.com/kb/HT213843 Vendor Advisory
- https://support.apple.com/kb/HT213844 Vendor Advisory
- https://support.apple.com/kb/HT213845 Vendor Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker partial control
Timeline
Published28 Jul 2023
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2023-38601 · NVD
Track software like this
Free during beta