What is CVE-2023-27967?

CVE-2023-27967 is a high-severity vulnerability in Apple Xcode. CVSS score: 8.6/10. Published 2023-05-08.

How severe is CVE-2023-27967?

High severity. CVSS v3 base score is 8.6 out of 10.

Vulnerability in Apple Xcode

CVE-2023-27967

The issue was addressed with improved memory handling. This issue is fixed in Xcode 14.3. An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges.

EPSS: 0.002 (14.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.6 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H.

Affected products

Apple Xcode — versions unspecified

References

product-security@apple.com (Vendor Advisory)

Frequently asked questions

What is CVE-2023-27967?: CVE-2023-27967 is a high-severity vulnerability in Apple Xcode. CVSS score: 8.6/10. Published 2023-05-08.
How severe is CVE-2023-27967?: High severity. CVSS v3 base score is 8.6 out of 10.