CVE-2023-42824

The issue was addressed with improved checks. This issue is fixed in iOS 16.7.1 and iPadOS 16.7.1. A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.6.

CVSS v3 7.8 HIGH

7.8^/10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://support.apple.com/en-us/HT213972	Release Notes Vendor Advisory
https://support.apple.com/en-us/HT213972	Release Notes Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:apple:ipados::::::::
	cpe:2.3:o:apple:ipados::::::::
	cpe:2.3:o:apple:iphone_os::::::::
	cpe:2.3:o:apple:iphone_os::::::::

History

21 Nov 2024, 08:23

Type	Values Removed	Values Added
References	~~() https://support.apple.com/en-us/HT213972 - Release Notes, Vendor Advisory~~	() https://support.apple.com/en-us/HT213972 - Release Notes, Vendor Advisory

26 Oct 2023, 20:01

Type	Values Removed	Values Added
References	~~(MISC) https://support.apple.com/en-us/HT213972 -~~	(MISC) https://support.apple.com/en-us/HT213972 - Release Notes, Vendor Advisory

25 Oct 2023, 19:15

Type	Values Removed	Values Added
References	~~{'url': 'https://support.apple.com/kb/HT213972', 'name': 'https://support.apple.com/kb/HT213972', 'tags': [], 'refsource': 'MISC'}~~ ~~{'url': 'http://seclists.org/fulldisclosure/2023/Oct/16', 'name': 'http://seclists.org/fulldisclosure/2023/Oct/16', 'tags': [], 'refsource': 'MISC'}~~ ~~{'url': 'https://support.apple.com/en-us/HT213961', 'name': 'https://support.apple.com/en-us/HT213961', 'tags': ['Release Notes', 'Vendor Advisory'], 'refsource': 'MISC'}~~
Summary	The issue was addressed with improved checks. This issue is fixed in iOS 17.0.3 and iPadOS 17.0.3, iOS 16.7.1 and iPadOS 16.7.1. A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.6.	The issue was addressed with improved checks. This issue is fixed in iOS 16.7.1 and iPadOS 16.7.1. A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.6.

17 Oct 2023, 05:15

Type	Values Removed	Values Added
References		(MISC) http://seclists.org/fulldisclosure/2023/Oct/16 -

10 Oct 2023, 23:15

Type	Values Removed	Values Added
Summary	The issue was addressed with improved checks. This issue is fixed in iOS 17.0.3 and iPadOS 17.0.3. A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.6.	The issue was addressed with improved checks. This issue is fixed in iOS 17.0.3 and iPadOS 17.0.3, iOS 16.7.1 and iPadOS 16.7.1. A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.6.
References	~~{'url': 'https://support.apple.com/kb/HT213961', 'name': 'https://support.apple.com/kb/HT213961', 'tags': ['Release Notes', 'Vendor Advisory'], 'refsource': 'MISC'}~~ ~~{'url': 'http://seclists.org/fulldisclosure/2023/Oct/12', 'name': 'http://seclists.org/fulldisclosure/2023/Oct/12', 'tags': ['Mailing List'], 'refsource': 'MISC'}~~	(MISC) https://support.apple.com/kb/HT213972 - (MISC) https://support.apple.com/en-us/HT213972 -

07 Oct 2023, 03:10

Type	Values Removed	Values Added
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 7.8
CPE		cpe:2.3:o:apple:iphone_os:::::::: cpe:2.3:o:apple:ipados::::::::
CWE		NVD-CWE-noinfo
First Time		Apple ipados Apple Apple iphone Os
References	~~(MISC) https://support.apple.com/en-us/HT213961 -~~	(MISC) https://support.apple.com/en-us/HT213961 - Release Notes, Vendor Advisory
References	~~(MISC) https://support.apple.com/kb/HT213961 -~~	(MISC) https://support.apple.com/kb/HT213961 - Release Notes, Vendor Advisory
References	~~(MISC) http://seclists.org/fulldisclosure/2023/Oct/12 -~~	(MISC) http://seclists.org/fulldisclosure/2023/Oct/12 - Mailing List

06 Oct 2023, 06:15

Type	Values Removed	Values Added
References		(MISC) http://seclists.org/fulldisclosure/2023/Oct/12 -

04 Oct 2023, 19:53

Type	Values Removed	Values Added
New CVE

Information

Published : 2023-10-04 19:15

Updated : 2024-11-21 08:23

NVD link : CVE-2023-42824

Mitre link : CVE-2023-42824

CVE.ORG link : CVE-2023-42824

JSON object : View

Products Affected

apple

iphone_os
ipados

CWE

NVD-CWE-noinfo

7.8 /10