01 Record
CVE-2023-38606
This issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.6.8, iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Big Sur 11.7.9, macOS
MediumKEVPUBLISHEDCNA: apple
CNA base score5.5 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
02 Description
This issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.6.8, iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Big Sur 11.7.9, macOS
03 Exploitation and scoring
- Exploitation
- Exploited in the wild. Listed in the CISA Known Exploited Vulnerabilities catalog on 2023-07-26. Federal remediation due 2023-08-16.
- SSVC decision
- ExploitationactiveCISA reports credible evidence of active exploitation.
- AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
- Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.
- EPSS probability
- 2.89% probability of exploitation activity in the next 30 days.
- EPSS percentile
- Equal to or higher than the score of 86.7% of scored records. A rank, not a probability.
- NVD base score
- 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
- NVD CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
- NVD analysis status
- Analyzed. NVD last modified this record on 2026-06-17.
- Red Hat severity
- No Red Hat rating. Red Hat rates the CVEs that affect its products.
Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.
04 Metadata
- Published
- 2023-07-26 23:55Z3 YR AGO
- Last updated
- 2025-10-30 18:31Z12 MO AGO
- Reserved
- 2023-07-20
- Assigning CNA
- apple
- Record state
- PUBLISHED
- Severity
- Medium (CVSS 5.5)
- CNA CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
- Weaknesses
- No CWE assigned
- Data version
- 5.2
- Document digest
- 08e933221624f97f877243ff46979f22e26a1b28205c52b43c5d1f0e79acea4e
05 Affected products
VendorProductVersionsPlatforms
06 References
- support.apple.comhttps://support.apple.com/en-us/HT213846
- support.apple.comhttps://support.apple.com/en-us/HT213841
- support.apple.comhttps://support.apple.com/en-us/HT213843
- support.apple.comhttps://support.apple.com/en-us/HT213842
- support.apple.comhttps://support.apple.com/en-us/HT213845
- support.apple.comhttps://support.apple.com/en-us/HT213844
- support.apple.comhttps://support.apple.com/en-us/HT213848
- www.cisa.govhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-38606