CVE-2023-32396

CVE Database · CVE-2023-32396

CVE-2023-32396

· HIGHModified

CVSS v3.1

7.8

EPSS

0.34%

Published

Sep 27, 2023

Modified

Nov 4, 2025

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

This issue was addressed with improved checks. This issue is fixed in Xcode 15, tvOS 17, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to gain elevated privileges.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Products (6)

apple · xcode (up to 15.0)vulnerable

apple · ipados (up to 17.0)vulnerable

apple · iphone_os (up to 17.0)vulnerable

apple · macos (up to 14.0)vulnerable

apple · tvos (up to 17.0)vulnerable

apple · watchos (up to 10.0)vulnerable

References (20)

http://seclists.org/fulldisclosure/2023/Oct/10

http://seclists.org/fulldisclosure/2023/Oct/3

http://seclists.org/fulldisclosure/2023/Oct/7

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2023/Oct/8

http://seclists.org/fulldisclosure/2023/Oct/9

https://support.apple.com/en-us/HT213936

Release NotesVendor Advisory

https://support.apple.com/en-us/HT213937

Release NotesVendor Advisory

https://support.apple.com/en-us/HT213938

Release Notes

KEV Catalog EPSS Scores Vendors All CVEs