CVE-2023-42867highCWE-281

CVE-2023-42867: high-severity vulnerability in Apple GarageBand

Published · Updated

Follow this CVE+ Monitor GarageBand

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.8epss 0.2%
This issue was addressed with improved validation of the process entitlement and Team ID. This issue is fixed in GarageBand 10.4.9. An app may be able to gain root privileges.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Apple · GarageBand
Related CVEs — Apple GarageBand

In the same product, most dangerous first.

CVE-2024-44142HIGHCVE-2024-44142EPSS 0.3%CVE-2024-23300HIGHCVE-2024-23300EPSS 0.3%CVE-2021-30654—CVE-2021-30654EPSS 0.2%