CVE-2023-42834

Summary

A privacy issue was addressed with improved handling of files. This issue is fixed in watchOS 10.1, macOS Sonoma 14.1, macOS Monterey 12.7.2, macOS Ventura 13.6.3, iOS 17.1 and iPadOS 17.1. An app may be able to access sensitive user data.

Affected Software

VendorProductVersion RangeStatus
ApplemacOSunspecified < 13.6affected
ApplemacOSunspecified < 14.1affected
ApplemacOSunspecified < 12.7affected
ApplewatchOSunspecified < 10.1affected
AppleiOS and iPadOSunspecified < 17.1affected

Weaknesses

  • An app may be able to access sensitive user data

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References