CVEvulnerability
CVE-2023-28178
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-05-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Description
A logic issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. An app may be able to bypass Privacy preferences.
Affected configurations
• apple ipados (< 16.4)
• apple iphone os (< 16.4)
• apple macos (>= 12.0 < 12.6.4)
• apple macos (>= 13.0 < 13.3)
References
- https://support.apple.com/en-us/HT213670 Vendor Advisory
- https://support.apple.com/en-us/HT213674 support.apple.com
- https://support.apple.com/en-us/HT213676 Vendor Advisory
- https://support.apple.com/en-us/HT213677 Vendor Advisory
- https://support.apple.com/en-us/HT213678 support.apple.com
- https://support.apple.com/en-us/HT213670 Vendor Advisory
- https://support.apple.com/en-us/HT213674 support.apple.com
- https://support.apple.com/en-us/HT213676 Vendor Advisory
- https://support.apple.com/en-us/HT213677 Vendor Advisory
- https://support.apple.com/en-us/HT213678 support.apple.com