CVE-2023-27967: High severity apple xcode vulnerability
Published Mar 30, 2023
·Updated
Dev Tools. The issue was addressed with improved memory handling.
Other sources
The issue was addressed with improved memory handling. This issue is fixed in Xcode 14.3. An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges
Credit
Austin Emmitt, Senior Security Researcher at Trellix ARC
Affected Software
2 affected componentsFixes available
Apple Xcode<14.3
14.3
Apple Xcode<14.3
Event History
May 8, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionWeakness
Data Sourced
08:15 PM
Description
Data Sourced
via NVD·08:15 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2023-27967.
2
What is the severity of CVE-2023-27967?
The severity of CVE-2023-27967 is high, with a severity value of 8.6.
3
How was CVE-2023-27967 fixed?
CVE-2023-27967 was fixed in Xcode 14.3 with improved memory handling.
4
Which software is affected by CVE-2023-27967?
Xcode versions up to and excluding 14.3 are affected by CVE-2023-27967.
5
Where can I find more information about CVE-2023-27967?
You can find more information about CVE-2023-27967 on the Apple support website at https://support.apple.com/en-us/HT213679.