CVE-2023-27942

Published: May 8, 2023Modified: Jan 29, 2025

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Big Sur 11.7.5, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. An app may be able to access user-sensitive data.

Affected (6)

Products: Apple: Ipados, Iphone Os, Macos, Tvos, Watchos

5 products

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Apple Ipados	Before 16.4
Apple Iphone Os	Before 16.4
Apple Macos	Before 12.6.4
Apple Macos	From 13.0 to 13.3
Apple Tvos	Before 16.4
Apple Watchos	Before 9.4

Related CWEs

CWE-922

Insecure Storage of Sensitive Information

The product stores sensitive information without properly limiting read or write access by unauthorized actors.

References (12)

https://support.apple.com/en-us/HT213670

Source: product-security@apple.com

Release NotesVendor Advisory

https://support.apple.com/en-us/HT213674

Source: product-security@apple.com

Release NotesVendor Advisory

https://support.apple.com/en-us/HT213675

Source: product-security@apple.com

https://support.apple.com/en-us/HT213676

Source: product-security@apple.com

Release NotesVendor Advisory

https://support.apple.com/en-us/HT213677

Source: product-security@apple.com

Release NotesVendor Advisory

https://support.apple.com/en-us/HT213678

Source: product-security@apple.com

Release NotesVendor Advisory

https://support.apple.com/en-us/HT213670