CVE-2023-42861

State: Published
Severity: Not scored
Published: Oct 25, 2023
Updated: Feb 13, 2025
Reserved: Sep 14, 2023

Description

A logic issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14.1. An attacker with knowledge of a standard user's credentials can unlock another standard user's locked screen on the same Mac.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
macOSApple	before 14.1Affected

References

https://support.apple.com/en-us/HT213984
https://support.apple.com/kb/HT213984
http://seclists.org/fulldisclosure/2023/Oct/24
https://support.apple.com/kb/HT214107
http://seclists.org/fulldisclosure/2024/May/13

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.