New MCP server — Bring vulnerability intelligence into your AI
Back to feed

CVE-2023-40401

NVDCIRCLENISA

EUVD-2023-44972 · Published Oct 25, 2023

The issue was addressed with additional permissions checks. This issue is fixed in macOS Ventura 13.6.1. An attacker may be able to access passkeys without authentication.

Technologies

Apple Macos

Weaknesses

CWE-306

CVSS scores

  • v3.17.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

Initial Access

References

Potentially impacted assets

See if this affects your attack surface

Take 15 minutes to discover our platform with our experts

PatrowlIntel platform screenshot