CVE-2023-42844
Published Oct 25, 2023
·Updated
Foundation. This issue was addressed with improved handling of symlinks.
Credit
Ron Masas(BreakPoint), Ron Masas(BreakPoint), Ron Masas(BreakPoint)
Affected Software
6 affected componentsFixes available
Apple macOS<14.1
14.1
macOS<12.7.1
12.7.1
macOS Ventura<13.6.1
13.6.1
macOS>=12.0.0<12.7.1
macOS>=13.0<13.6.1
macOS>=14.0<14.1
Event History
Oct 25, 2023
Data Sourced
via Apple·12:00 AM
DescriptionWeaknessAffected Software
CVE Published
06:32 PM
Data Sourced
06:32 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2023-42844?
CVE-2023-42844 is a vulnerability that allows a website to access sensitive user data when resolving symlinks.
2
Which versions of macOS are affected by CVE-2023-42844?
macOS Sonoma 14.1, macOS Monterey 12.7.1, and macOS Ventura 13.6.1 are affected by CVE-2023-42844.
3
How was CVE-2023-42844 fixed?
CVE-2023-42844 was fixed with improved handling of symlinks in macOS Sonoma 14.1, macOS Monterey 12.7.1, and macOS Ventura 13.6.1.
4
How can I protect myself from CVE-2023-42844?
To protect yourself from CVE-2023-42844, ensure that you have installed the latest updates for macOS Sonoma, Monterey, or Ventura.
5
Where can I find more information about CVE-2023-42844?
You can find more information about CVE-2023-42844 on the Apple support page: [link1], [link2], [link3].