CVE-2023-38259: Apple macOS

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.6.8, macOS Ventura 13.5, macOS Big Sur 11.7.9. An app may be able to access user-sensitive data.

Affected products

• Apple macOS: from 11.0, before 11.7.9 (fixed in 11.7.9); from 12.0, before 12.6.8 (fixed in 12.6.8); from 13.0, before 13.5 (fixed in 13.5)

Published 2023-07-27. Last modified 2026-06-17.