CVE-2023-32364

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Ventura 13.5. A sandboxed process may be able to circumvent sandbox restrictions.

Affected

Apple · macOS

CVSS v3.1 NVD

8.6 HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

EPSS

0.83% chance of exploitation in the next 30 days, 57th percentile

Published

2023-07-27

Updated

2025-02-13

Proof-of-concept exploits (1)

• gergelykalman/CVE-2023-32364-macos-app-sandbox-escape23★ · 2023-09-26

Security advisories

• https://support.apple.com/en-us/HT213843
• https://support.apple.com/kb/HT213844
• https://support.apple.com/kb/HT213845

References

• CVE Record
• NVD entry

Related

• CVE-2023-32407
• CVE-2023-32422
• CVE-2023-32428
• CVE-2023-38571