CVE-2023-40390: Apple macOS

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

A privacy issue was addressed by moving sensitive data to a protected location. This issue is fixed in macOS Sonoma 14.2. An app may be able to access user-sensitive data.

Affected products

• Apple macOS: before 14.2 (fixed in 14.2)

Published 2024-03-28. Last modified 2026-06-17.