CVEvulnerability
CVE-2023-40437
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2024-01-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Description
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. An app may be able to read sensitive location information.
Affected configurations
• apple ipados (< 16.6)
• apple iphone os (< 16.6)
• apple macos (< 13.5)
References
- https://support.apple.com/en-us/HT213841 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213843 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213841 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213843 Release Notes, Vendor Advisory