CVEvulnerability
CVE-2023-27931
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-05-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-203
Description
This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.3, iOS 16.4 and iPadOS 16.4, macOS Big Sur 11.7.3, tvOS 16.4, watchOS 9.4. An app may be able to access user-sensitive data.
Affected configurations
• apple ipados (< 16.4)
• apple iphone os (< 16.4)
• apple macos (< 13.3)
• apple tvos (< 16.4)
• apple watchos (< 9.4)
Related
Weakness · CWE (1)
- CWE-203 Observable Discrepancy weakness
References
- https://support.apple.com/en-us/HT213603 support.apple.com
- https://support.apple.com/en-us/HT213604 support.apple.com
- https://support.apple.com/en-us/HT213670 Vendor Advisory
- https://support.apple.com/en-us/HT213674 Vendor Advisory
- https://support.apple.com/en-us/HT213676 Vendor Advisory
- https://support.apple.com/en-us/HT213678 Vendor Advisory
- https://support.apple.com/en-us/HT213603 support.apple.com
- https://support.apple.com/en-us/HT213604 support.apple.com
- https://support.apple.com/en-us/HT213670 Vendor Advisory
- https://support.apple.com/en-us/HT213674 Vendor Advisory
- https://support.apple.com/en-us/HT213676 Vendor Advisory
- https://support.apple.com/en-us/HT213678 Vendor Advisory