VulnerabilityModified
CVE-2023-40528
This issue was addressed by removing the vulnerable code.
MEDIUM 5.5EPSS 0.24%
Does this matter?
Lower severity and a low EPSS score (0.24%). Track it; it rarely justifies an emergency change on its own.
Description
This issue was addressed by removing the vulnerable code. This issue is fixed in tvOS 17, watchOS 10, macOS Sonoma 14, iOS 17 and iPadOS 17, macOS Ventura 13.6.4. An app may be able to bypass Privacy preferences.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
- EPSS
- 0.24% probability · 16th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-284
- Affected
- apple/ipados · apple/iphone os · apple/macos · apple/tvos · apple/watchos
- Source
- product-security@apple.com
References
- http://seclists.org/fulldisclosure/2024/Jan/37Third Party Advisory
- https://support.apple.com/en-us/HT213936Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213937Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213938Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213940Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214058Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT213936Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT213937Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT213938Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT213940Release Notes, Vendor Advisory
- http://seclists.org/fulldisclosure/2024/Jan/37Third Party Advisory
- https://support.apple.com/en-us/HT213936Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213937Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213938Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213940Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214058Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT213936Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT213937Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT213938Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT213940Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT214058
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.