VulnerabilityModified
CVE-2023-28178
An app may be able to bypass Privacy preferences.
MEDIUM 5.5EPSS 0.23%
Does this matter?
Lower severity and a low EPSS score (0.23%). Track it; it rarely justifies an emergency change on its own.
Description
A logic issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. An app may be able to bypass Privacy preferences.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
- EPSS
- 0.23% probability · 14th percentile
- CISA KEV
- Not listed
- Affected
- apple/ipados · apple/iphone os · apple/macos
- Source
- product-security@apple.com
References
- https://support.apple.com/en-us/HT213670Vendor Advisory
- https://support.apple.com/en-us/HT213674
- https://support.apple.com/en-us/HT213676Vendor Advisory
- https://support.apple.com/en-us/HT213677Vendor Advisory
- https://support.apple.com/en-us/HT213678
- https://support.apple.com/en-us/HT213670Vendor Advisory
- https://support.apple.com/en-us/HT213674
- https://support.apple.com/en-us/HT213676Vendor Advisory
- https://support.apple.com/en-us/HT213677Vendor Advisory
- https://support.apple.com/en-us/HT213678
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.