Lucene search

AppleCVELIST:CVE-2023-40437

HistoryJan 10, 2024 - 10:03 p.m.

CVE-2023-40437

2024-01-1022:03:10

apple

www.cve.org

privacy

redaction

log

entries

ios

ipados

macos

ventura

sensitive

location

information

AI Score

Confidence

Low

EPSS

0.001

Percentile

20.7%

JSON

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. An app may be able to read sensitive location information.

CNA Affected

[
  {
    "vendor": "Apple",
    "product": "iOS and iPadOS",
    "versions": [
      {
        "version": "unspecified",
        "status": "affected",
        "lessThan": "16.6",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Apple",
    "product": "macOS",
    "versions": [
      {
        "version": "unspecified",
        "status": "affected",
        "lessThan": "13.5",
        "versionType": "custom"
      }
    ]
  }
]

References

support.apple.com/en-us/HT213841

support.apple.com/en-us/HT213843