VulnerabilityModified
CVE-2023-40456
The issue was addressed with improved checks.
LOW 3.3EPSS 0.28%
Does this matter?
Lower severity and a low EPSS score (0.28%). Track it; it rarely justifies an emergency change on its own.
Description
The issue was addressed with improved checks. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10. An app may be able to access edited photos saved to a temporary directory.
- CVSS 3.1
- 3.3 LOWCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
- EPSS
- 0.28% probability · 21th percentile
- CISA KEV
- Not listed
- Affected
- apple/ipados · apple/iphone os · apple/tvos · apple/watchos
- Source
- product-security@apple.com
References
- http://seclists.org/fulldisclosure/2023/Oct/10Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2023/Oct/8
- http://seclists.org/fulldisclosure/2023/Oct/9
- https://support.apple.com/en-us/HT213936Vendor Advisory
- https://support.apple.com/en-us/HT213937Vendor Advisory
- https://support.apple.com/en-us/HT213938Vendor Advisory
- http://seclists.org/fulldisclosure/2023/Oct/10Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2023/Oct/8
- http://seclists.org/fulldisclosure/2023/Oct/9
- https://support.apple.com/en-us/HT213936Vendor Advisory
- https://support.apple.com/en-us/HT213937Vendor Advisory
- https://support.apple.com/en-us/HT213938Vendor Advisory
- https://support.apple.com/kb/HT213936
- https://support.apple.com/kb/HT213937
- https://support.apple.com/kb/HT213938
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.