{"id":"CVE-2023-32396","state":"PUBLISHED","title":"This issue was addressed with improved checks. This issue is fixed in Xcode 15, tvOS 17, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to gain elevated priv","description":"This issue was addressed with improved checks. This issue is fixed in Xcode 15, tvOS 17, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to gain elevated privileges.","publishedAt":"2023-09-26T20:14:32.595Z","updatedAt":"2025-11-04T19:16:16.896Z","severity":{"score":7.8,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","source":"CISA-ADP"},"assigner":"apple","products":["Apple iOS and iPadOS","Apple Xcode","Apple tvOS","Apple macOS","Apple watchOS"],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"version":"unspecified","status":"affected","lessThan":"17","versionType":"custom"}]},{"vendor":"Apple","product":"Xcode","versions":[{"version":"unspecified","status":"affected","lessThan":"15","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"version":"unspecified","status":"affected","lessThan":"17","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"version":"unspecified","status":"affected","lessThan":"14","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"version":"unspecified","status":"affected","lessThan":"10","versionType":"custom"}]}],"references":["https://support.apple.com/en-us/HT213938","https://support.apple.com/en-us/HT213939","https://support.apple.com/en-us/HT213936","https://support.apple.com/en-us/HT213940","https://support.apple.com/en-us/HT213937","http://seclists.org/fulldisclosure/2023/Oct/7","http://seclists.org/fulldisclosure/2023/Oct/10","http://seclists.org/fulldisclosure/2023/Oct/8","http://seclists.org/fulldisclosure/2023/Oct/9","http://seclists.org/fulldisclosure/2023/Oct/3","https://support.apple.com/kb/HT213940","https://support.apple.com/kb/HT213939","https://support.apple.com/kb/HT213937","https://support.apple.com/kb/HT213936"],"weaknesses":[],"ingestedAt":"2026-10-29T20:06:00.499Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/32xxx/CVE-2023-32396.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2023-32396","state":"PUBLISHED","datePublished":"2023-09-26T20:14:32.595Z","dateUpdated":"2025-11-04T19:16:16.896Z","assignerShortName":"apple","assignerOrgId":"286789f9-fbc2-4510-9f9a-43facdede74c","dateReserved":"2023-05-08T22:31:41.824Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"This issue was addressed with improved checks. This issue is fixed in Xcode 15, tvOS 17, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to gain elevated privileges."}],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"version":"unspecified","status":"affected","lessThan":"17","versionType":"custom"}]},{"vendor":"Apple","product":"Xcode","versions":[{"version":"unspecified","status":"affected","lessThan":"15","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"version":"unspecified","status":"affected","lessThan":"17","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"version":"unspecified","status":"affected","lessThan":"14","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"version":"unspecified","status":"affected","lessThan":"10","versionType":"custom"}]}],"references":[{"url":"https://support.apple.com/en-us/HT213938"},{"url":"https://support.apple.com/en-us/HT213939"},{"url":"https://support.apple.com/en-us/HT213936"},{"url":"https://support.apple.com/en-us/HT213940"},{"url":"https://support.apple.com/en-us/HT213937"},{"url":"http://seclists.org/fulldisclosure/2023/Oct/7"},{"url":"http://seclists.org/fulldisclosure/2023/Oct/10"},{"url":"http://seclists.org/fulldisclosure/2023/Oct/8"},{"url":"http://seclists.org/fulldisclosure/2023/Oct/9"},{"url":"http://seclists.org/fulldisclosure/2023/Oct/3"}],"problemTypes":[{"descriptions":[{"lang":"en","description":"An app may be able to gain elevated privileges"}]}],"providerMetadata":{"shortName":"apple","orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","dateUpdated":"2023-10-03T05:07:07.875Z"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://support.apple.com/en-us/HT213938","tags":["x_transferred"]},{"url":"https://support.apple.com/en-us/HT213939","tags":["x_transferred"]},{"url":"https://support.apple.com/en-us/HT213936","tags":["x_transferred"]},{"url":"https://support.apple.com/en-us/HT213940","tags":["x_transferred"]},{"url":"https://support.apple.com/en-us/HT213937","tags":["x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2023/Oct/7","tags":["x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2023/Oct/10","tags":["x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2023/Oct/8","tags":["x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2023/Oct/9","tags":["x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2023/Oct/3","tags":["x_transferred"]},{"url":"https://support.apple.com/kb/HT213940"},{"url":"https://support.apple.com/kb/HT213939"},{"url":"https://support.apple.com/kb/HT213937"},{"url":"https://support.apple.com/kb/HT213936"}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2025-11-04T19:16:16.896Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"timestamp":"2025-04-23T13:26:52.027620Z","id":"CVE-2023-32396","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"type":"CWE","lang":"en","description":"CWE-noinfo Not enough information"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-05-05T15:17:18.380Z"}}]}}}