VulnerabilityModified
CVE-2023-42839
This issue was addressed with improved state management.
MEDIUM 5.5EPSS 0.20%
Does this matter?
Lower severity and a low EPSS score (0.20%). Track it; it rarely justifies an emergency change on its own.
Description
This issue was addressed with improved state management. This issue is fixed in tvOS 17.1, watchOS 10.1, macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1. An app may be able to access sensitive user data.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- EPSS
- 0.20% probability · 10th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-922
- Affected
- apple/ipad os · apple/iphone os · apple/macos · apple/tvos · apple/watchos
- Source
- product-security@apple.com
References
- https://support.apple.com/en-us/HT213982Vendor Advisory
- https://support.apple.com/en-us/HT213984Vendor Advisory
- https://support.apple.com/en-us/HT213987Vendor Advisory
- https://support.apple.com/en-us/HT213988Vendor Advisory
- https://support.apple.com/en-us/HT213982Vendor Advisory
- https://support.apple.com/en-us/HT213984Vendor Advisory
- https://support.apple.com/en-us/HT213987Vendor Advisory
- https://support.apple.com/en-us/HT213988Vendor Advisory
- https://support.apple.com/kb/HT213982
- https://support.apple.com/kb/HT213984
- https://support.apple.com/kb/HT213988
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.