Elevated Privileges Vulnerability in Apple iOS and tvOS Products
CVE-2023-40419

7.8HIGH

Key Information:

Vendor
Apple
Status
iOS and iPadOS
tvOS
watchOS
Vendor
CVE Published:
27 September 2023

Summary

A vulnerability has been identified in Apple's operating systems, allowing certain applications to gain elevated privileges without proper authorization. This issue has been addressed with enhanced validation checks in the latest updates across iOS, tvOS, iPadOS, and watchOS, ensuring improved security and integrity of user data. Users are encouraged to update their devices to the current versions to mitigate potential risks.

Affected Version(s)

iOS and iPadOS < 17

tvOS < 17

watchOS < 10

References

https://support.apple.com/en-us/HT213938
https://support.apple.com/en-us/HT213936
https://support.apple.com/en-us/HT213937

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.