Vulnerability Description
This issue was addressed by removing the vulnerable code. This issue is fixed in GarageBand for macOS 10.4.8. An app may be able to gain elevated privileges during the installation of GarageBand.
CVSS Score
7.8
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apple | Mac Os X | >= 10.0, < 10.4.8 |
References
- https://support.apple.com/en-us/HT213650Vendor Advisory
- https://support.apple.com/en-us/HT213650Vendor Advisory
FAQ
What is CVE-2023-27960?
CVE-2023-27960 is a vulnerability with a CVSS score of 7.8 (HIGH). This issue was addressed by removing the vulnerable code. This issue is fixed in GarageBand for macOS 10.4.8. An app may be able to gain elevated privileges during the installation of GarageBand.
How severe is CVE-2023-27960?
CVE-2023-27960 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-27960?
Check the references section above for vendor advisories and patch information. Affected products include: Apple Mac Os X.