The issue was addressed with additional permissions checks. This issue is fixed in macOS Ventura 13.6.1. An attacker may be able to access passkeys without authentication.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Airport | — | — | Oct 14, 2024 | Oct 25, 2023 |
| Apple Osx Amd | — | — | Oct 14, 2024 | Oct 25, 2023 |
| Apple Osx Applemobilefileintegrity | — | — | Oct 14, 2024 | Oct 25, 2023 |
| Apple Osx Appleneuralengine | — | — | Oct 14, 2024 | Oct 25, 2023 |
| Apple Osx Appsandbox | — | — | Oct 14, 2024 | Oct 25, 2023 |
| Apple Osx Appstore | — | — | Oct 14, 2024 | Oct 25, 2023 |
| Apple Osx Asktobuy | — | — | Oct 14, 2024 | Oct 25, 2023 |
| Apple Osx Authkit | — | — | Oct 14, 2024 | Oct 25, 2023 |
| Apple Osx Bluetooth | — | — | Oct 14, 2024 | Oct 25, 2023 |
| Apple Osx Bom | — | — | Oct 14, 2024 | Oct 25, 2023 |
| Apple Osx Bootp | — | — | Oct 14, 2024 | Oct 25, 2023 |
| Apple Osx Calendar | — | — | Oct 14, 2024 | Oct 25, 2023 |
| Apple Osx Cfnetwork | — | — | Oct 14, 2024 | Oct 25, 2023 |
| Apple Osx Clock | — | — | Oct 14, 2024 | Oct 25, 2023 |
| Apple Osx Colorsync | — | — | Oct 14, 2024 | Oct 25, 2023 |
| Apple Osx Coreanimation | — | — | Oct 14, 2024 | Oct 25, 2023 |
| Apple Osx Coredata | — | — | Oct 14, 2024 | Oct 25, 2023 |
| Apple Osx Coreimage | — | — | Oct 14, 2024 | Oct 25, 2023 |
| Apple Osx Coremedia | — | — | Oct 14, 2024 | Oct 25, 2023 |
| Apple Osx Cups | — | — | Oct 14, 2024 | Oct 25, 2023 |
| Apple Osx Devtools | — | — | Oct 14, 2024 | Oct 25, 2023 |
| Apple Osx Fileprovider | — | — | Oct 14, 2024 | Oct 25, 2023 |
| Apple Osx Gamecenter | — | — | Oct 14, 2024 | Oct 25, 2023 |
| Apple Osx Gpudrivers | — | — | Oct 14, 2024 | Oct 25, 2023 |
| Apple Osx Graphicsdrivers | — | — | Oct 14, 2024 | Oct 25, 2023 |
| Apple Osx Icloud | — | — | Oct 14, 2024 | Oct 25, 2023 |
| Apple Osx Icloudphotolibrary | — | — | Oct 14, 2024 | Oct 25, 2023 |
| Apple Osx Imagecapture | — | — | Oct 14, 2024 | Oct 25, 2023 |
| Apple Osx Ioacceleratorfamily | — | — | Oct 14, 2024 | Oct 25, 2023 |
| Apple Osx Iouserethernet | — | — | Oct 14, 2024 | Oct 25, 2023 |
| Apple Osx Kernel | — | — | Oct 14, 2024 | Oct 25, 2023 |
| Apple Osx Launchservices | — | — | Oct 14, 2024 | Oct 25, 2023 |
| Apple Osx Libpcap | — | — | Oct 14, 2024 | Oct 25, 2023 |
| Apple Osx Libxpc | — | — | Oct 14, 2024 | Oct 25, 2023 |
| Apple Osx Libxslt | — | — | Oct 14, 2024 | Oct 25, 2023 |
| Apple Osx Maps | — | — | Oct 14, 2024 | Oct 25, 2023 |
| Apple Osx Messages | — | — | Oct 14, 2024 | Oct 25, 2023 |
| Apple Osx Modelio | — | — | Oct 14, 2024 | Oct 25, 2023 |
| Apple Osx Music | — | — | Oct 14, 2024 | Oct 25, 2023 |
| Apple Osx Netfsframework | — | — | Oct 14, 2024 | Oct 25, 2023 |
| Apple Osx Notes | — | — | Oct 14, 2024 | Oct 25, 2023 |
| Apple Osx Openssh | — | — | Oct 14, 2024 | Oct 25, 2023 |
| Apple Osx Passkeys | — | Upgrade macOS to the latest version | Oct 26, 2023 | Oct 26, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub