CVE-2023-28207: Apple macOS

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. A plug-in may be able to inherit app permissions and access user data.

Affected products

• Apple macOS: before 11.7.5 (fixed in 11.7.5); from 12.0, before 12.6.4 (fixed in 12.6.4); from 13.0, before 13.3 (fixed in 13.3)

Published 2025-03-21. Last modified 2026-06-17.