← Back

CVE-2023-42939

nvd nist
Published: Feb 21, 2024Modified: Nov 4, 2025

JSON object

Loading...
3.3
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Exploitability: 1.8 / Impact: 1.4
Source: NVD

Description

A logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1. A user's private browsing activity may be unexpectedly saved in the App Privacy Report.

Affected (2)

Products: Apple: Ipad Os, Iphone Os
Apple
2 products
Ipad Os
Iphone Os
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Ipad Os
Before 17.1
Iphone Os
Before 17.1

Related CWEs

CWE-841
Improper Enforcement of Behavioral Workflow
The product supports a session in which more than one behavior must be performed by an actor, but it does not properly ensure that the actor performs the behaviors in the required sequence.

References (3)

Source: product-security@apple.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.