CVE-2023-32404

This issue was addressed with improved entitlements. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, macOS Ventura 13.4. An app may be able to bypass Privacy preferences.
References
Link Resource
https://support.apple.com/en-us/HT213757 Release Notes Vendor Advisory
https://support.apple.com/en-us/HT213758 Release Notes Vendor Advisory
https://support.apple.com/en-us/HT213764 Release Notes Vendor Advisory
https://support.apple.com/kb/HT213761
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

History

06 Sep 2023, 08:15

Type Values Removed Values Added
References
  • (MISC) https://support.apple.com/kb/HT213761 -

27 Jul 2023, 04:15

Type Values Removed Values Added
Summary This issue was addressed with improved entitlements. This issue is fixed in iOS 16.5 and iPadOS 16.5, macOS Ventura 13.4, watchOS 9.5. An app may be able to bypass Privacy preferences This issue was addressed with improved entitlements. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, macOS Ventura 13.4. An app may be able to bypass Privacy preferences.

30 Jun 2023, 07:07

Type Values Removed Values Added
First Time Apple
Apple watchos
Apple iphone Os
Apple macos
Apple ipados
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.5
CWE NVD-CWE-noinfo
References (MISC) https://support.apple.com/en-us/HT213764 - (MISC) https://support.apple.com/en-us/HT213764 - Release Notes, Vendor Advisory
References (MISC) https://support.apple.com/en-us/HT213758 - (MISC) https://support.apple.com/en-us/HT213758 - Release Notes, Vendor Advisory
References (MISC) https://support.apple.com/en-us/HT213757 - (MISC) https://support.apple.com/en-us/HT213757 - Release Notes, Vendor Advisory
CPE cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

23 Jun 2023, 19:24

Type Values Removed Values Added
New CVE

Information

Published : 2023-06-23 18:15

Updated : 2024-02-28 20:13


NVD link : CVE-2023-32404

Mitre link : CVE-2023-32404

CVE.ORG link : CVE-2023-32404


JSON object : View

Products Affected

apple

  • watchos
  • ipados
  • macos
  • iphone_os