First published: Wed Oct 25 2023(Updated: )
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1. An app may be able to access sensitive user data.
Credit: Wojciech Regula SecuRingCsaba Fitzl @theevilbit Offensive SecurityNoah Roskin-Frazee Pr Wojciech Regula SecuRingCsaba Fitzl @theevilbit Offensive SecurityNoah Roskin-Frazee Pr product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
Apple iOS | <17.1 | 17.1 |
Apple iPadOS | <17.1 | 17.1 |
Apple iPadOS | >=17.0<17.1 | |
Apple iPhone OS | >=17.0<17.1 | |
Apple macOS | >=14.0<14.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2023-41072 is a privacy issue in macOS Sonoma 14.1, iOS 17.1, and iPadOS 17.1 where an app may be able to access sensitive user data.
CVE-2023-41072 affects macOS Sonoma version up to and excluding 14.1, iOS version up to and excluding 17.1, and iPadOS version up to and excluding 17.1.
To fix CVE-2023-41072, update your macOS Sonoma to version 14.1, iOS to version 17.1, or iPadOS to version 17.1.
The severity of CVE-2023-41072 is not specified.
You can find more information about CVE-2023-41072 on the Apple support website and the seclists.org website.