CVE-2023-42931

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.6.3, macOS Sonoma 14.2, macOS Monterey 12.7.2. A process may gain admin privileges without proper authentication.

Affected

Apple · macOS

CVSS v3.1 NVD

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v3.1 CNA

8.3 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L

EPSS

1.17% chance of exploitation in the next 30 days, 67th percentile

Published

2024-03-28

Updated

2025-11-04

Proof-of-concept exploits (2)

• d0rb/CVE-2023-429317★ · 2024-03-26
• tageniu/CVE-2023-429315★ · 2025-07-31

Security advisories

• https://support.apple.com/en-us/HT214036
• https://support.apple.com/en-us/HT214037
• https://support.apple.com/en-us/HT214038

References

• CVE Record
• NVD entry

Related

• CVE-2021-34527
• CVE-2021-3773
• CVE-2023-26469
• CVE-2023-2916
• CVE-2023-30943
• CVE-2023-33242