Logic Flaw in Apple Products Leading to Privacy Preference Bypass
CVE-2023-23503

5.5MEDIUM

Key Information:

Vendor

Apple
Status
iOS And iPad OS
TV OS
Mac OS
Watch OS
Vendor
CVE Published:
27 February 2023

What is CVE-2023-23503?

A logic issue within Apple's macOS and iOS platforms has been identified, which could allow applications to bypass user-defined privacy preferences. This vulnerability was resolved with enhanced state management in the latest software updates. Users are encouraged to update their devices to the latest versions to mitigate potential risks associated with this flaw, ensuring better protection of their privacy settings.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

iOS and iPadOS < 16.3

iOS and iPadOS < 15.7

macOS < 13.2

References

https://support.apple.com/en-us/HT213606
https://support.apple.com/en-us/HT213601
https://support.apple.com/en-us/HT213598

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.