Information Disclosure Vulnerability in Apple macOS and iOS Products
CVE-2023-42934

4.2MEDIUM

Key Information:

Vendor

Apple
Status
iOS and iPadOS
macOS
Vendor
CVE Published:
10 January 2024

What is CVE-2023-42934?

An identified vulnerability allowed applications with root privileges to potentially access private user information, leading to an unauthorized disclosure of sensitive data. The issue has been effectively resolved through the removal of the vulnerable code in the latest versions of macOS Sonoma 14, iOS 17, and iPadOS 17. Users are encouraged to update their devices to maintain security and protect their personal information.

Affected Version(s)

iOS and iPadOS < 17

macOS < 14

References

https://support.apple.com/en-us/HT213938
https://support.apple.com/en-us/HT213940

CVSS V3.1

Score:
4.2
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.