Main Vulnerability Database Vulnerabilities #VU87755

Improper Authorization in macOS - CVE-2023-42931

Published: March 25, 2024 / Updated: April 9, 2024

Vulnerability identifier: #VU87755

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-42931

CWE-ID: CWE-285

Exploitation vector: Local access

Exploit availability: Public exploit is available

Vulnerability details

The vulnerability allows a local application to escalate privileges on the system.

The vulnerability exists due to improper authorization checks in DiskArbitration. An unprivileged local process can obtain administrative privileges on the system.

Affected software

macOS

How to mitigate CVE-2023-42931

Install updates from vendor's website.

macOS - addressed in versions 14.2 23C64, 12.7.2 21G1974, 13.6.3 22G436

Links to Public Exploits and PoC-codes

Exploit #9692 - CVE-2023-42931 (The exploit targets a critical privilege escalation vulnerability in macOS versions Monterey, Ventura, and Sonoma.) (April 9, 2024)

External References

https://support.apple.com/en-us/HT214036