CVE-2023-42925

2024-07-2920:21:16

apple

github.com

data restriction

ios 17

ipados 17

macos sonoma 14

notes attachments

cve-2023-42925

AI Score

5.2

Confidence

Low

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

The issue was addressed with improved restriction of data container access. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to access Notes attachments.

CNA Affected

[
  {
    "vendor": "Apple",
    "product": "iOS and iPadOS",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified",
        "lessThan": "17",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Apple",
    "product": "macOS",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified",
        "lessThan": "14",
        "versionType": "custom"
      }
    ]
  }
]