What is CVE-2023-27952?

CVE-2023-27952 is a medium-severity vulnerability in Apple macOS, classified under Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition). CVSS score: 4.7/10. Published 2023-05-08.

How severe is CVE-2023-27952?

Medium severity. CVSS v3 base score is 4.7 out of 10.

Vulnerability in Apple macOS

CVE-2023-27952

A race condition was addressed with improved locking. This issue is fixed in macOS Ventura 13.3. An app may bypass Gatekeeper checks.

Vulnerability class: Race Condition

Published 2023-05-08 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 4.7 (Medium). Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N.

EPSS exploit prediction

EPSS: 0.002 (12.2th percentile), scored 2026-10-03.

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 12th percentile — 12.2% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.002 · newest: 0.002 · change: 0.000

Affected products

Apple macOS — versions unspecified

Weakness classification (CWE)

CWE-362 — Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition)

References

support.apple.com/en-us/HT213670 (Vendor Advisory)
support.apple.com/kb/HT214119
seclists.org/fulldisclosure/2024/Jul/18

Frequently asked questions

What is CVE-2023-27952?: CVE-2023-27952 is a medium-severity vulnerability in Apple macOS, classified under Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition). CVSS score: 4.7/10. Published 2023-05-08.
How severe is CVE-2023-27952?: Medium severity. CVSS v3 base score is 4.7 out of 10.