CVEvulnerability
CVE-2023-42952
4.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2024-02-21
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.4 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 4.4 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-269
Description
The issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS Ventura 13.6.3, macOS Sonoma 14.1, macOS Monterey 12.7.1. An app with root privileges may be able to access private information.
Affected configurations
• apple ipad os (< 17.1)
• apple iphone os (< 17.1)
• apple macos (>= 12.0 < 12.7.1)
• apple macos (>= 13.0 < 13.6.3)
• apple macos 14.0
Related
Weakness · CWE (1)
- CWE-269 Improper Privilege Management weakness
References
- https://support.apple.com/en-us/HT213982 Vendor Advisory
- https://support.apple.com/en-us/HT213983 Vendor Advisory
- https://support.apple.com/en-us/HT213984 Vendor Advisory
- https://support.apple.com/en-us/HT214038 Vendor Advisory
- https://support.apple.com/en-us/HT213982 Vendor Advisory
- https://support.apple.com/en-us/HT213983 Vendor Advisory
- https://support.apple.com/en-us/HT213984 Vendor Advisory
- https://support.apple.com/en-us/HT214038 Vendor Advisory
- https://support.apple.com/kb/HT213982 support.apple.com
- https://support.apple.com/kb/HT213984 support.apple.com
- https://support.apple.com/kb/HT214038 support.apple.com