CVE-2023-42839

Published: Feb 21, 2024Modified: Nov 4, 2025

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

This issue was addressed with improved state management. This issue is fixed in tvOS 17.1, watchOS 10.1, macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1. An app may be able to access sensitive user data.

Affected (5)

Products: Apple: Ipad Os, Iphone Os, Macos, Tvos, Watchos

5 products

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Apple Ipad Os	Before 17.1
Apple Iphone Os	Before 17.1
Apple Macos	Version 14.0
Apple Tvos	Before 17.1
Apple Watchos	Before 10.1

Related CWEs

CWE-922

Insecure Storage of Sensitive Information

The product stores sensitive information without properly limiting read or write access by unauthorized actors.

References (11)

https://support.apple.com/en-us/HT213982

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/en-us/HT213984

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/en-us/HT213987

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/en-us/HT213988

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/en-us/HT213982