CVE-2023-42823 | BDVDB-2026-225232 Detail
AppleiOS and iPadOS
Description#
The issue was resolved by sanitizing logging This issue is fixed in watchOS 10.1, macOS Sonoma 14.1, tvOS 17.1, macOS Monterey 12.7.1, iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1, macOS Ventura 13.6.1. An app may be able to access user-sensitive data.
Impact#
Per CVSS v3.1: confidentiality impact low, integrity impact none, availability impact none. Attack vector: network.
Weaknesses#
- CWE-922 Insecure Storage of Sensitive Information
References#
- https://support.apple.com/en-us/HT213981
- https://support.apple.com/en-us/HT213987
- https://support.apple.com/en-us/HT213984
- https://support.apple.com/en-us/HT213988
- https://support.apple.com/en-us/HT213985
- https://support.apple.com/en-us/HT213982
- https://support.apple.com/en-us/HT213983
- https://support.apple.com/kb/HT213988
- https://support.apple.com/kb/HT213987
- https://support.apple.com/kb/HT213984
- https://support.apple.com/kb/HT213983
- https://support.apple.com/kb/HT213982
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.