CVE-2023-23505
First published: Mon Jan 23 2023(Updated: )
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, watchOS 9.3, macOS Big Sur 11.7.3, iOS 15.7.3 and iPadOS 15.7.3, iOS 16.3 and iPadOS 16.3. An app may be able to access information about a user’s contacts.
Credit: Wojciech Regula SecuRingCsaba Fitzl @theevilbit Offensive SecurityWojciech Reguła SecuRing Offensive SecurityCsaba Fitzl @theevilbit Offensive SecurityWojciech Reguła SecuRingCsaba Fitzl @theevilbit Offensive SecurityWojciech Regula SecuRingCsaba Fitzl @theevilbit Offensive SecurityWojciech Reguła SecuRingCsaba Fitzl @theevilbit Offensive SecurityWojciech Reguła SecuRingCsaba Fitzl @theevilbit Offensive Security product-security@apple.com product-security@apple.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apple iOS | <15.7.3 | 15.7.3 |
| Apple iPadOS | <15.7.3 | 15.7.3 |
| Apple watchOS | <9.3 | 9.3 |
| Apple macOS Big Sur | <11.7.3 | 11.7.3 |
| Apple macOS Monterey | <12.6.3 | 12.6.3 |
| <13.2 | 13.2 | |
| Apple iOS | <16.3 | 16.3 |
| Apple iPadOS | <16.3 | 16.3 |
| Apple iPadOS | <15.7.3 | |
| Apple iPadOS | >=16.0<16.3 | |
| Apple iPhone OS | <15.7.3 | |
| Apple iPhone OS | >=16.0<16.3 | |
| Apple macOS | >=11.0<11.7.3 | |
| Apple macOS | >=12.0.0<12.6.3 | |
| Apple macOS | >=13.0<13.2 | |
| Apple watchOS | <9.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://support.apple.com/en-us/HT213598 (Advisory)
- https://support.apple.com/en-us/HT213599 (Advisory)
- https://support.apple.com/en-us/HT213603 (Advisory)
- https://support.apple.com/en-us/HT213604 (Advisory)
- https://support.apple.com/en-us/HT213605 (Advisory)
- https://support.apple.com/en-us/HT213606 (Advisory)
- https://support.apple.com/kb/HT213599
- https://support.apple.com/kb/HT213606
- https://support.apple.com/kb/HT213605
- https://support.apple.com/kb/HT213604
- https://support.apple.com/kb/HT213603
- https://support.apple.com/kb/HT213598
Parent vulnerabilities
(Appears in the following advisories)
Peer vulnerabilities
(Found alongside the following vulnerabilities)
- CVE-2023-32438
- CVE-2023-23499
- CVE-2023-23520
- CVE-2023-41990
- CVE-2023-23519
- CVE-2023-23500
- CVE-2023-23502
- CVE-2023-23504
- CVE-2023-23503
- CVE-2023-23512
- CVE-2023-23505
- CVE-2023-23511
- CVE-2023-32393
- CVE-2022-0108
- CVE-2023-23496
- CVE-2023-23518
- CVE-2023-23517
- CVE-2023-23530
- CVE-2023-23531
- CVE-2023-23498
- CVE-2023-28208
- CVE-2022-42915
- CVE-2022-42916
- CVE-2022-32221
- CVE-2022-35260
- CVE-2023-23539
- CVE-2023-23513
- CVE-2023-23493
- CVE-2023-23507
- CVE-2023-23516
- CVE-2023-23506
- CVE-2023-23497
- CVE-2023-23510
- CVE-2022-3705
- CVE-2023-23501
- CVE-2023-23508
- CVE-2022-35252
- CVE-2022-32915
- CVE-2022-42834
- CVE-2023-27931
Frequently Asked Questions
What is CVE-2023-23505?
CVE-2023-23505 is a vulnerability that relates to a privacy issue with improved private data redaction for log entries.
What is the severity of CVE-2023-23505?
The severity of CVE-2023-23505 is low with a severity value of 3.3.
How does CVE-2023-23505 affect macOS and iOS devices?
CVE-2023-23505 affects macOS devices running versions up to and including 11.7.3, macOS Monterey up to and including 12.6.3, and iOS devices up to and including 15.7.3.
How do I fix CVE-2023-23505?
To fix CVE-2023-23505, update your macOS device to version 11.7.3 or later, update macOS Monterey to version 12.6.3 or later, and update iOS devices to version 15.7.3 or later.
Where can I find more information about CVE-2023-23505?
You can find more information about CVE-2023-23505 on the following Apple support pages: [link1](https://support.apple.com/en-us/HT213598), [link2](https://support.apple.com/en-us/HT213599), [link3](https://support.apple.com/en-us/HT213603).
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- collector/nvd-api
- agent/software-canonical-lookup-request
- collector/nvd-index
- agent/references
- agent/weakness
- agent/severity
- agent/author
- agent/softwarecombine
- collector/apple-support
- source/Apple
- agent/software-canonical-lookup
- agent/event
- agent/description
- agent/tags
- vendor/apple
- canonical/apple ipados
- version/apple ipados/16.0
- canonical/apple iphone os
- version/apple iphone os/16.0
- canonical/apple macos
- version/apple macos/11.0
- version/apple macos/12.0.0
- version/apple macos/13.0
- canonical/apple watchos
- canonical/apple ios
- canonical/apple macos ventura
- canonical/apple macos monterey
- canonical/apple macos big sur