High severity7.5NVD Advisory· Published Oct 25, 2023· Updated Jun 17, 2026
CVE-2023-42844
CVE-2023-42844
Description
This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, macOS Ventura 13.6.1. A website may be able to access sensitive user data when resolving symlinks.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4- Range: 14.1
- Range: 13.6.1
- Range: 12.7.1
- Range: unspecified
Patches
Vulnerability mechanics
References
9- seclists.org/fulldisclosure/2023/Oct/21nvdMailing ListThird Party Advisory
- seclists.org/fulldisclosure/2023/Oct/24nvdMailing ListThird Party Advisory
- seclists.org/fulldisclosure/2023/Oct/26nvdMailing ListThird Party Advisory
- support.apple.com/en-us/HT213983nvdRelease NotesVendor Advisory
- support.apple.com/en-us/HT213984nvdRelease NotesVendor Advisory
- support.apple.com/en-us/HT213985nvdRelease NotesVendor Advisory
- support.apple.com/kb/HT213983nvdRelease NotesVendor Advisory
- support.apple.com/kb/HT213984nvdRelease NotesVendor Advisory
- support.apple.com/kb/HT213985nvdRelease NotesVendor Advisory
News mentions
0No linked articles in our index yet.