CVE-2023-42834

CVSS 6.2 MEDIUMEPSS 0.2%

Vexday Risk Score

13Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 6.2EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

21 fev 2024Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

A privacy issue was addressed with improved handling of files. This issue is fixed in watchOS 10.1, macOS Sonoma 14.1, macOS Monterey 12.7.2, macOS Ventura 13.6.3, iOS 17.1 and iPadOS 17.1. An app may be able to access sensitive user data.

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Produtos afetados

Apple · iOS and iPadOS Apple · macOS Apple · watchOS

Referências

https://support.apple.com/en-us/HT213982 https://support.apple.com/en-us/HT213984 https://support.apple.com/en-us/HT213988 https://support.apple.com/en-us/HT214037 https://support.apple.com/en-us/HT214038 https://support.apple.com/kb/HT213982 https://support.apple.com/kb/HT213984 https://support.apple.com/kb/HT213988 https://support.apple.com/kb/HT214037 https://support.apple.com/kb/HT214038