Vulnerability Details CVE-2023-41989
The issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sonoma 14.1. An attacker may be able to execute arbitrary code as root from the Lock Screen.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 30.7%
CVSS Severity
CVSS v3 Score 6.8
References
- http://seclists.org/fulldisclosure/2023/Oct/24
- https://support.apple.com/en-us/HT213984
- https://support.apple.com/kb/HT213984
- https://support.apple.com/kb/HT214037
- https://support.apple.com/kb/HT214038
- http://seclists.org/fulldisclosure/2023/Oct/24
- https://support.apple.com/en-us/HT213984
- https://support.apple.com/kb/HT213984
- https://support.apple.com/kb/HT214037
- https://support.apple.com/kb/HT214038