First published: Thu May 18 2023(Updated: )
The issue was addressed with improved handling of caches. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. An app may be able to read sensitive location information.
Credit: an anonymous researcher Adam M. Adam M. Adam M. Adam M. Adam M. product-security@apple.com product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
Apple iOS | <16.5 | 16.5 |
Apple iPadOS | <16.5 | 16.5 |
<13.4 | 13.4 | |
<12.6.6 | 12.6.6 | |
Apple tvOS | <16.5 | 16.5 |
Apple watchOS | <9.5 | 9.5 |
Apple iOS | <15.7.6 | 15.7.6 |
Apple iPadOS | <15.7.6 | 15.7.6 |
Apple iPadOS | <15.7.6 | |
Apple iPadOS | >=16.0<16.5 | |
Apple iPhone OS | <15.7.6 | |
Apple iPhone OS | >=16.0<16.5 | |
Apple macOS | >=12.0<12.6.6 | |
Apple macOS | >=13.0<13.4 | |
Apple tvOS | <16.5 | |
Apple watchOS | <9.5 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Appears in the following advisories)
(Found alongside the following vulnerabilities)
The vulnerability ID is CVE-2023-32408.
The severity of CVE-2023-32408 is medium (5.5).
CVE-2023-32408 affects macOS Monterey 12.0 to 12.6.6, iOS 15.0 to 15.7.6, iPadOS 15.0 to 15.7.6, iOS 16.0 to 16.5, iPadOS 16.0 to 16.5, watchOS 9.5, and tvOS 16.0 to 16.5.
To fix CVE-2023-32408, update to watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, macOS Monterey 12.6.6, iOS 16.5, or iPadOS 16.5.
The impact of CVE-2023-32408 is that an app may be able to read sensitive location information.