Medium severity5.9NVD Advisory· Published Feb 27, 2023· Updated Jun 17, 2026

CVE-2023-23520

Description

A race condition was addressed with additional validation. This issue is fixed in watchOS 9.3, tvOS 16.3, macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3. A user may be able to read arbitrary files as root.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Apple Inc./tvOSllm-fuzzy2 versions
=16.3+ 1 more
- (no CPE)range: =16.3
- (no CPE)range: unspecified
Apple Inc./macOSllm-fuzzy2 versions
=13.2+ 1 more
- (no CPE)range: =13.2
- (no CPE)range: unspecified
Apple Inc./Ipadosllm-fuzzy
Range: =16.3
Apple Inc./watchOSllm-fuzzy2 versions
=9.3+ 1 more
- (no CPE)range: =9.3
- (no CPE)range: unspecified
Apple Inc./iOSllm-fuzzy
Range: =16.3
Apple Inc./iOS and iPadOScpe-rescue
Range: unspecified

Patches

Vulnerability mechanics

References

support.apple.com/en-us/HT213605nvdVendor Advisory
support.apple.com/en-us/HT213606nvdVendor Advisory
support.apple.com/en-us/HT213599nvd
support.apple.com/en-us/HT213601nvd

News mentions

No linked articles in our index yet.

cvss	0.384
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000