CVE-2023-28826
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
08/03/2024
Last modified:
28/03/2025
Description
This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, macOS Monterey 12.7.4, macOS Sonoma 14.1, macOS Ventura 13.6.5. An app may be able to access sensitive user data.
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* | 16.7.6 (excluding) | |
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* | 16.7.6 (excluding) | |
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* | 12.0 (including) | 12.7.4 (excluding) |
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* | 13.0 (including) | 13.6.5 (excluding) |
cpe:2.3:o:apple:macos:14.0:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- http://seclists.org/fulldisclosure/2024/Mar/22
- http://seclists.org/fulldisclosure/2024/Mar/23
- https://support.apple.com/en-us/HT213984
- https://support.apple.com/en-us/HT214082
- https://support.apple.com/en-us/HT214083
- https://support.apple.com/en-us/HT214085
- https://support.apple.com/kb/HT213984
- http://seclists.org/fulldisclosure/2024/Mar/22
- http://seclists.org/fulldisclosure/2024/Mar/23
- https://support.apple.com/en-us/HT213984
- https://support.apple.com/en-us/HT214082
- https://support.apple.com/en-us/HT214083
- https://support.apple.com/en-us/HT214085
- https://support.apple.com/kb/HT213984