CVE-2023-40394

CVSS 3.3 LOWEPSS 0.2%CWE-20

Vexday Risk Score

8Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 3.3EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

10 ene 2024Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

The issue was addressed with improved validation of environment variables. This issue is fixed in iOS 16.6 and iPadOS 16.6. An app may be able to access sensitive user data.

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Productos afectados

Apple · iOS and iPadOS

Referencias

https://support.apple.com/en-us/HT213841