Lucene search

AppleVULNRICHMENT:CVE-2023-42939

HistoryFeb 21, 2024 - 6:40 a.m.

CVE-2023-42939

2024-02-2106:40:49

apple

github.com

logic issue

ios 17.1

ipados 17.1

private browsing

app privacy report

AI Score

5.8

Confidence

Low

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

A logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1. A user’s private browsing activity may be unexpectedly saved in the App Privacy Report.

CNA Affected

[
  {
    "vendor": "Apple",
    "product": "iOS and iPadOS",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified",
        "lessThan": "17.1",
        "versionType": "custom"
      }
    ]
  }
]

References

support.apple.com/en-us/HT213982