CVE-2023-40529

Summary

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 17 and iPadOS 17. A person with physical access to a device may be able to use VoiceOver to access private calendar information.

Affected Software

VendorProductVersion RangeStatus
AppleiOS and iPadOSunspecified < 17affected

Weaknesses

  • A person with physical access to a device may be able to use VoiceOver to access private calendar information

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References