VulnerabilityModified
CVE-2023-28826
This issue was addressed with improved redaction of sensitive information.
MEDIUM 5.5EPSS 0.25%
Does this matter?
Lower severity and a low EPSS score (0.25%). Track it; it rarely justifies an emergency change on its own.
Description
This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, macOS Monterey 12.7.4, macOS Sonoma 14.1, macOS Ventura 13.6.5. An app may be able to access sensitive user data.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- EPSS
- 0.25% probability · 17th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-200
- Affected
- apple/ipados · apple/iphone os · apple/macos
- Source
- product-security@apple.com
References
- http://seclists.org/fulldisclosure/2024/Mar/22Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Mar/23Mailing List, Third Party Advisory
- https://support.apple.com/en-us/HT213984Vendor Advisory
- https://support.apple.com/en-us/HT214082Vendor Advisory
- https://support.apple.com/en-us/HT214083Vendor Advisory
- https://support.apple.com/en-us/HT214085Vendor Advisory
- https://support.apple.com/kb/HT213984Vendor Advisory
- http://seclists.org/fulldisclosure/2024/Mar/22Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Mar/23Mailing List, Third Party Advisory
- https://support.apple.com/en-us/HT213984Vendor Advisory
- https://support.apple.com/en-us/HT214082Vendor Advisory
- https://support.apple.com/en-us/HT214083Vendor Advisory
- https://support.apple.com/en-us/HT214085Vendor Advisory
- https://support.apple.com/kb/HT213984Vendor Advisory
- https://support.apple.com/kb/HT214082
- https://support.apple.com/kb/HT214083
- https://support.apple.com/kb/HT214085
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.