High severity7.8NVD Advisory· Published Sep 20, 2023· Updated Jun 17, 2026
CVE-2023-41902
CVE-2023-41902
Description
An XPC misconfiguration vulnerability in CoreCode MacUpdater before 2.3.8, and 3.x before 3.1.2, allows attackers to escalate privileges by crafting malicious .pkg files.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- CoreCode/MacUpdaterdescription
- Range: <2.3.8, <3.1.2
Patches
Vulnerability mechanics
References
3- gist.github.com/NSEcho/5d048a0796ceef59d6b1df1659bd1057nvdThird Party Advisory
- www.corecode.io/macupdater/history2.htmlnvdRelease Notes
- www.corecode.io/macupdater/history3.htmlnvdRelease Notes
News mentions
0No linked articles in our index yet.