CVE-2023-42823

Summary

The issue was resolved by sanitizing logging This issue is fixed in watchOS 10.1, macOS Sonoma 14.1, tvOS 17.1, macOS Monterey 12.7.1, iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1, macOS Ventura 13.6.1. An app may be able to access user-sensitive data.

Affected Software

VendorProductVersion RangeStatus
AppleiOS and iPadOSunspecified < 16.7affected
AppletvOSunspecified < 17.1affected
ApplemacOSunspecified < 14.1affected
ApplewatchOSunspecified < 10.1affected
ApplemacOSunspecified < 13.6affected
AppleiOS and iPadOSunspecified < 17.1affected
ApplemacOSunspecified < 12.7affected

Weaknesses

  • An app may be able to access user-sensitive data

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References