---
cve: "CVE-2023-40446"
severity: "HIGH"
cvss: 7.8
epss: "26%"
vendor: "Apple"
kev: false
exploited: false
published: "2023-12-12 01:15:10"
tags: [cve, security, high]
source: tsecurity.de CVE-Dossier
exported: "2026-09-11T12:23:33+02:00"
---

# CVE-2023-40446

> 7.8 HIGH

## Beschreibung

The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.7.1, iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1. Processing maliciously crafted input may lead to arbitrary code execution in user-installed apps.

## CVSS-Vektor

```
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Lokal | good |
| AC Komplexität | Gering | bad |
| PR Privilegien | Keine | bad |
| UI Interaktion | Erforderlich | good |
| S Scope | Unverändert | good |
| C Vertraulichkeit | Hoch | bad |
| I Integrität | Hoch | bad |
| A Verfügbarkeit | Hoch | bad |

## Referenzen

- <https://support.apple.com/en-us/HT213981>
- <https://support.apple.com/en-us/HT213982>
- <https://support.apple.com/en-us/HT213983>
- <https://support.apple.com/kb/HT213981>
- <https://support.apple.com/kb/HT213983>
- <https://support.apple.com/kb/HT213984>
- <https://support.apple.com/kb/HT213985>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2023-40446) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_