First published: Thu May 18 2023(Updated: )
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in watchOS 9.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. An app may be able to bypass Privacy preferences.
Credit: Kirin @Pwnrin Kirin @Pwnrin Kirin @Pwnrin Kirin @Pwnrin Kirin @Pwnrin Kirin @Pwnrin product-security@apple.com product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
Apple iOS | <16.5 | 16.5 |
Apple iPadOS | <16.5 | 16.5 |
<13.4 | 13.4 | |
<12.6.6 | 12.6.6 | |
Apple macOS Big Sur | <11.7.7 | 11.7.7 |
Apple watchOS | <9.5 | 9.5 |
Apple iOS | <15.7.6 | 15.7.6 |
Apple iPadOS | <15.7.6 | 15.7.6 |
Apple iPadOS | <15.7.6 | |
Apple iPadOS | >=16.0<16.5 | |
Apple iPhone OS | <15.7.6 | |
Apple iPhone OS | >=16.0<16.5 | |
Apple macOS | >=11.0<11.7.7 | |
Apple macOS | >=12.0.0<12.6.6 | |
Apple macOS | >=13.0<13.4 | |
Apple watchOS | <9.5 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Appears in the following advisories)
(Found alongside the following vulnerabilities)
The severity of CVE-2023-32388 is medium with a severity value of 5.5.
CVE-2023-32388 affects macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 15.7.6 and iPadOS 15.7.6, and iOS 16.5 and iPadOS 16.5.
The fix for CVE-2023-32388 improves private data redaction for log entries, addressing a privacy issue.
If an app bypasses Privacy preferences due to CVE-2023-32388, it may be able to access private data that should be redacted.
To fix the vulnerability identified in CVE-2023-32388, update your software to watchOS 9.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5.