{"id":"CVE-2023-42897","url":"https://www.cyber-defence.io/tools/cve/CVE-2023-42897","generatedAt":"2026-10-28T00:51:13.994Z","title":"An attacker with physical access may be able to use Siri to access sensitive user data.","description":"The issue was addressed with improved checks. This issue is fixed in iOS 17.2 and iPadOS 17.2. An attacker with physical access may be able to use Siri to access sensitive user data.","published":"2023-12-12T01:15:12.000Z","lastModified":"2026-06-17T06:24:47.000Z","status":"Modified","sourceIdentifier":"product-security@apple.com","cvss":{"version":"3.1","score":4.6,"severity":"MEDIUM","vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},"cwe":[],"affected":["apple/ipados","apple/iphone os"],"epss":{"score":0.00348,"percentile":0.28135,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.35%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"http://seclists.org/fulldisclosure/2023/Dec/7","tags":["Third Party Advisory"],"source":"product-security@apple.com"},{"url":"https://support.apple.com/en-us/HT214035","tags":["Release Notes","Vendor Advisory"],"source":"product-security@apple.com"},{"url":"http://seclists.org/fulldisclosure/2023/Dec/7","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/en-us/HT214035","tags":["Release Notes","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/kb/HT214035","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2023-42897","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}