CVE-2023-40425

4.4 mediumEPSS 0.3%

Medium (4.4) in apple macos. EPSS 0.3% chance of exploitation in the next 30 days.

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma 14, macOS Monterey 12.7.1. An app with root privileges may be able to access private information.

Severity

CVSS 3.1

4.4 medium

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 25% of CVEs (scores of 2026-10-31)
CWE: CWE-532
Published: 2023-10-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

apple:macos

References

https://support.apple.com/en-us/109055
https://support.apple.com/en-us/120950
http://seclists.org/fulldisclosure/2023/Oct/21
https://support.apple.com/en-us/HT213983
https://support.apple.com/kb/HT213983

Check your stack JSON