CVE-2023-32391

Reference Links

• https://support.apple.com/en-us/HT213757 (Advisory)
• https://support.apple.com/en-us/HT213758 (Advisory)
• https://support.apple.com/en-us/HT213761 (Advisory)
• https://support.apple.com/en-us/HT213764 (Advisory)
• https://support.apple.com/en-us/HT213765 (Advisory)
• https://support.apple.com/kb/HT213761

Parent vulnerabilities

(Appears in the following advisories)

• HT213757
• HT213758
• HT213761
• HT213764
• HT213765

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2023-32388
• CVE-2023-32400
• CVE-2023-34352
• CVE-2023-32425
• CVE-2023-32411
• CVE-2023-32371
• CVE-2023-32419
• CVE-2023-32399
• CVE-2023-28191
• CVE-2023-32392
• CVE-2023-32372
• CVE-2023-32384
• CVE-2023-32354
• CVE-2023-32420
• CVE-2023-27930
• CVE-2023-32398
• CVE-2023-32413
• CVE-2023-32352
• CVE-2023-29469
• CVE-2023-42869
• CVE-2023-32428
• CVE-2023-32407
• CVE-2023-32368
• CVE-2023-32403
• CVE-2023-32437
• CVE-2023-32385
• CVE-2023-32365
• CVE-2023-32390
• CVE-2023-32357
• CVE-2023-32367
• CVE-2023-32432
• CVE-2023-32391
• CVE-2023-32404
• CVE-2023-32394
• CVE-2023-32422
• CVE-2023-32376
• CVE-2023-28202
• CVE-2023-32412
• CVE-2023-32408
• CVE-2023-32415
• CVE-2023-32402
• CVE-2023-32423
• CVE-2023-32409
• CVE-2023-28204
• CVE-2023-32373
• CVE-2023-32389
• CVE-2023-32379
• CVE-2023-32383
• CVE-2023-32386
• CVE-2023-32360
• CVE-2023-32387
• CVE-2023-32414
• CVE-2023-32417
• CVE-2023-32410
• CVE-2023-27940
• CVE-2023-32369
• CVE-2023-32405
• CVE-2023-32375
• CVE-2023-32382
• CVE-2023-32380
• CVE-2023-32355
• CVE-2023-32395
• CVE-2023-32401
• CVE-2023-32363
• CVE-2023-32397
• CVE-2023-22809
• CVE-2023-23532
• CVE-2023-28181

Frequently Asked Questions

• What is CVE-2023-32391?

  CVE-2023-32391 is a vulnerability that allows a shortcut to use sensitive data without prompting the user.

• What software versions are affected by CVE-2023-32391?

  iOS versions up to but excluding 15.7.6, iPadOS versions up to but excluding 15.7.6, watchOS up to but excluding 9.5, macOS Ventura up to but excluding 13.4, iOS versions up to but excluding 16.5, and iPadOS versions up to but excluding 16.5 are affected by CVE-2023-32391.

• What is the severity of CVE-2023-32391?

  The severity of CVE-2023-32391 is medium, with a severity score of 4.6.

• How was CVE-2023-32391 addressed?

  CVE-2023-32391 was addressed with improved checks in iOS 15.7.6 and iPadOS 15.7.6, watchOS 9.5, iOS 16.5 and iPadOS 16.5, and macOS Ventura 13.4.

• Where can I find more information about CVE-2023-32391?

  More information about CVE-2023-32391 can be found on the Apple Support website. Please refer to the following links: [Link 1](https://support.apple.com/en-us/HT213765), [Link 2](https://support.apple.com/en-us/HT213764), [Link 3](https://support.apple.com/en-us/HT213761).