Permissions Issue in Apple iOS, iPadOS, and macOS Products
CVE-2023-38614

4.3MEDIUM

Key Information:

Vendor

Apple
Status
iOS And iPad OS
Mac OS
Vendor
CVE Published:
11 April 2025

What is CVE-2023-38614?

A permissions issue was identified that could allow certain applications to access sensitive user data on iOS, iPadOS, and macOS platforms. This vulnerability has been addressed with additional restrictions in the latest versions of these operating systems, enhancing user privacy and security.

Affected Version(s)

iOS and iPadOS < 17

macOS < 14

References

https://support.apple.com/en-us/120949
https://support.apple.com/en-us/120950

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.