CVEvulnerability
CVE-2023-23523
3.3 LOW
Official page ↗
- Status
- Modified
- Published
- 2023-05-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 3.3 LOW — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 3.3 LOW — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Description
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4. Photos belonging to the Hidden Photos Album could be viewed without authentication through Visual Lookup.
Affected configurations
• apple ipados (< 16.4)
• apple iphone os (< 16.4)
• apple macos (< 13.3)
References
- https://support.apple.com/en-us/HT213670 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213676 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213670 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213676 Release Notes, Vendor Advisory