CVE-2023-28826

Опубликовано: 08 мар. 2024

Источник: nvd

CVSS3: 5.5

EPSS Низкий

Описание

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, macOS Monterey 12.7.4, macOS Sonoma 14.1, macOS Ventura 13.6.5. An app may be able to access sensitive user data.

Ссылки

http://seclists.org/fulldisclosure/2024/Mar/22
Mailing List
Third Party Advisory
http://seclists.org/fulldisclosure/2024/Mar/23
Mailing List
Third Party Advisory
https://support.apple.com/en-us/HT213984
Vendor Advisory
https://support.apple.com/en-us/HT214082
Vendor Advisory
https://support.apple.com/en-us/HT214083
Vendor Advisory
https://support.apple.com/en-us/HT214085
Vendor Advisory
https://support.apple.com/kb/HT213984
Vendor Advisory
http://seclists.org/fulldisclosure/2024/Mar/22
Mailing List
Third Party Advisory
http://seclists.org/fulldisclosure/2024/Mar/23
Mailing List
Third Party Advisory
https://support.apple.com/en-us/HT213984
Vendor Advisory
https://support.apple.com/en-us/HT214082
Vendor Advisory
https://support.apple.com/en-us/HT214083
Vendor Advisory
https://support.apple.com/en-us/HT214085
Vendor Advisory
https://support.apple.com/kb/HT213984
Vendor Advisory
https://support.apple.com/kb/HT214082
https://support.apple.com/kb/HT214083
https://support.apple.com/kb/HT214085

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

Версия до 16.7.6 (исключая)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия до 16.7.6 (исключая)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия от 12.0 (включая) до 12.7.4 (исключая)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия от 13.0 (включая) до 13.6.5 (исключая)

cpe:2.3:o:apple:macos:14.0:*:*:*:*:*:*:*

EPSS

Процентиль: 5%

0.00022

Низкий

5.5 Medium

CVSS3

Дефекты

NVD-CWE-noinfo

CWE-200

Связанные уязвимости

GHSA-9r84-j222-pj3r