vulnerability

OS X update for Power Services (CVE-2023-42977)

Try Surface Command

Back to search

Severity

CVSS

(AV:L/AC:M/Au:N/C:C/I:C/A:C)

Published

Apr 8, 2025

Added

Apr 8, 2025

Modified

Mar 27, 2026

Description

A path handling issue was addressed with improved validation. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to break out of its sandbox.

Solution

apple-osx-upgrade-14

References

CVE-2023-42977
https://attackerkb.com/topics/CVE-2023-42977
CWE-20
EUVD-EUVD-2023-47398
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-47398
https://support.apple.com/kb/HT213940

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report