High severity · published Nov 7, 2023
CVE-2023-41036
Macvim is a text editor for MacOS
7.8
CVSS
0.3%
EPSS
No
On KEV
Description
Macvim is a text editor for MacOS. Prior to version 178, Macvim makes use of an insecure interprocess communication (IPC) mechanism which could lead to a privilege escalation. Distributed objects are a concept introduced by Apple which allow one program to vend an interface to another program. What is not made clear in the documentation is that this service can vend this interface to any other program on the machine. The impact of exploitation is a privilege escalation to root - this is likely to affect anyone who is not careful about the software they download and use MacVim to edit files that would require root privileges. Version 178 contains a fix for this issue.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 28% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MA
Macvim · Macvim
before 178 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-41036
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-41036
Product
https://github.com/macvim-dev/macvim/blob/d9de087dddadbfd82fcb5dc9734380a2f829bd0a/src/MacVim/MMAppController.h#L28
github.com
https://github.com/macvim-dev/macvim/blob/d9de087dddadbfd82fcb5dc9734380a2f829bd0a/src/MacVim/MMBackend.h
Patch
https://github.com/macvim-dev/macvim/commit/399b43e9e1dbf656a1780e87344f4d3c875e4cda
Exploit
https://github.com/macvim-dev/macvim/security/advisories/GHSA-9jgj-jfwg-99fv
More from Macvim
4.8
CVE-2025-8597
Privilege Escalation via get-task-allow entitlement in MacVim.app
