VulnerabilityModified
CVE-2023-42946
An app may be able to leak sensitive user information.
MEDIUM 5.5EPSS 0.44%
Does this matter?
Lower severity and a low EPSS score (0.44%). Track it; it rarely justifies an emergency change on its own.
Description
This issue was addressed with improved redaction of sensitive information. This issue is fixed in tvOS 17.1, watchOS 10.1, macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1. An app may be able to leak sensitive user information.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- EPSS
- 0.44% probability · 37th percentile
- CISA KEV
- Not listed
- Affected
- apple/ipad os · apple/iphone os · apple/macos · apple/tvos · apple/watchos
- Source
- product-security@apple.com
References
- https://support.apple.com/en-us/HT213982Vendor Advisory
- https://support.apple.com/en-us/HT213984Vendor Advisory
- https://support.apple.com/en-us/HT213987Vendor Advisory
- https://support.apple.com/en-us/HT213988Vendor Advisory
- https://support.apple.com/en-us/HT213982Vendor Advisory
- https://support.apple.com/en-us/HT213984Vendor Advisory
- https://support.apple.com/en-us/HT213987Vendor Advisory
- https://support.apple.com/en-us/HT213988Vendor Advisory
- https://support.apple.com/kb/HT213982
- https://support.apple.com/kb/HT213984
- https://support.apple.com/kb/HT213988
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.