High severity7.8NVD Advisory· Published Dec 20, 2024· Updated Jun 17, 2026
CVE-2023-42867
CVE-2023-42867
Description
This issue was addressed with improved validation of the process entitlement and Team ID. This issue is fixed in GarageBand 10.4.9. An app may be able to gain root privileges.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:apple:garageband:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:apple:garageband:*:*:*:*:*:*:*:*range: <10.4.9
- (no CPE)range: = 10.4.9
- (no CPE)range: unspecified
Patches
Vulnerability mechanics
References
2- support.apple.com/en-us/120299nvdVendor Advisory
- support.apple.com/kb/HT214042nvd
News mentions
0No linked articles in our index yet.