CVE-2023-42961

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2023
Source publication: Apr 11, 2025
Source updated: Apr 14, 2025
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

A path handling issue was addressed with improved validation. This issue is fixed in iOS 17 and iPadOS 17, iOS 16.7 and iPadOS 16.7, macOS Sonoma 14, macOS Ventura 13.6, macOS Monterey 12.7. A sandboxed process may be able to circumvent sandbox restrictions.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

iOS and iPadOS

Vendor: Apple
Product: iOS and iPadOS
Platforms: Unknown
Default status: Unknown

iOS and iPadOS · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
unspecified	`affected`	custom	17	Unavailable	None listed

iOS and iPadOS

Vendor: Apple
Product: iOS and iPadOS
Platforms: Unknown
Default status: Unknown

iOS and iPadOS · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
unspecified	`affected`	custom	16.7	Unavailable	None listed

macOS

Vendor: Apple
Product: macOS
Platforms: Unknown
Default status: Unknown

macOS · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
unspecified	`affected`	custom	14	Unavailable	None listed

macOS

Vendor: Apple
Product: macOS
Platforms: Unknown
Default status: Unknown

macOS · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
unspecified	`affected`	custom	13.6	Unavailable	None listed

macOS

Vendor: Apple
Product: macOS
Platforms: Unknown
Default status: Unknown

macOS · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
unspecified	`affected`	custom	12.7	Unavailable	None listed