CVE-2023-40401

—

CVSS 3.1

7.5 high

EPSS

<1%p60

Published

Oct 25, 2023 (Oct 25, 2023)

Modified

Jun 17, 2026

Description

The issue was addressed with additional permissions checks. This issue is fixed in macOS Ventura 13.6.1. An attacker may be able to access passkeys without authentication.

Vendors: apple
Products: macos
Weakness: CWE-306
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news0 stories

No ingested article mentions this CVE yet.