CVE-2023-42953

Published: Feb 21, 2024Modified: Nov 4, 2025

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

A permissions issue was addressed with additional restrictions. This issue is fixed in tvOS 17.1, watchOS 10.1, macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1. An app may be able to access sensitive user data.

Affected (5)

Products: Apple: Ipad Os, Iphone Os, Macos, Tvos, Watchos

5 products

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Apple Ipad Os	Before 17.1
Apple Iphone Os	Before 17.1
Apple Macos	Version 14.0
Apple Tvos	Before 17.1
Apple Watchos	Before 10.1

Related CWEs

CWE-276

Incorrect Default Permissions

During installation, installed file permissions are set to allow anyone to modify those files.

References (11)

https://support.apple.com/en-us/HT213982

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/en-us/HT213984

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/en-us/HT213987

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/en-us/HT213988

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/en-us/HT213982