{"id":"CVE-2023-42867","aliases":["EUVD-2023-47288","GHSA-x99p-qwh9-pfqr"],"status":"published","title":"This issue was addressed with improved validation of the process entitlement and Team ID. This...","description":"This issue was addressed with improved validation of the process entitlement and Team ID. This issue is fixed in GarageBand 10.4.9. An app may be able to gain root privileges.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.0021,"percentile":0.11229,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-281"],"published":"2024-12-20T03:37:12Z","modified":"2026-06-17T06:24:42Z","products":[{"vendor":"apple","product":"garageband"}],"references":[{"url":"https://support.apple.com/en-us/120299","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/kb/HT214042"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-42867"},{"url":"https://github.com/advisories/GHSA-x99p-qwh9-pfqr"}],"sources":{"cve":[{"id":"CVE-2023-42867","description":"This issue was addressed with improved validation of the process entitlement and Team ID. This issue is fixed in GarageBand 10.4.9. An app may be able to gain root privileges.","status":"published","published":"2024-12-20T03:37:12.119Z","modified":"2025-11-04T19:22:41.981Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-281"],"updated_at":"2026-11-02T14:35:18.16233Z"}],"euvd":[{"id":"EUVD-2023-47288","description":"This issue was addressed with improved validation of the process entitlement and Team ID. This issue is fixed in GarageBand 10.4.9. An app may be able to gain root privileges.","status":"published","published":"2024-12-20T03:37:12Z","modified":"2025-11-04T19:22:41Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T19:49:22.047381Z"}],"ghsa":[{"id":"GHSA-x99p-qwh9-pfqr","title":"This issue was addressed with improved validation of the process entitlement and Team ID. This...","description":"This issue was addressed with improved validation of the process entitlement and Team ID. This issue is fixed in GarageBand 10.4.9. An app may be able to gain root privileges.","status":"published","published":"2024-12-20T06:30:45Z","modified":"2025-11-04T21:31:30Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-281"],"updated_at":"2026-11-02T15:04:37.024156Z"}],"nvd":[{"id":"CVE-2023-42867","description":"This issue was addressed with improved validation of the process entitlement and Team ID. This issue is fixed in GarageBand 10.4.9. An app may be able to gain root privileges.","status":"published","published":"2024-12-20T04:15:05.2Z","modified":"2026-06-17T06:24:42.537Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-281"],"updated_at":"2026-11-02T14:09:20.080574Z"}]}}