First published: Wed Oct 25 2023(Updated: )
Automation. The issue was addressed with improved checks.
Credit: Bistrit Dahal product-security@apple.com CVE-2023-42946 Cristian Dinca Computer ScienceRomania 이준성(Junsung Lee) Cross Republic이준성(Junsung Lee) Pedro Ribeiro @pedrib1337 Agile Information SecurityVitor Pedreira @0xvhp_ Agile Information SecurityTalal Haj Bakry Mysk IncTommy Mysk @mysk_co Mysk IncYiğit Can YILMAZ @yilmazcanyigit Kirin @Pwnrin SecuRingWojciech Regula SecuRing Computer ScienceJZ Linus Henze Pinauten GmbHMickey Jin @patch1t Grzegorz Riegel Adam M. Csaba Fitzl @theevilbit Offensive SecurityMichael (Biscuit) Thomas - @social.lol @biscuit CVE-2023-42823 an anonymous researcher inooo Mingxuan Yang @PPPF00L 360 Vulnerability Research Institutehappybabywu 360 Vulnerability Research InstituteGuang Gong 360 Vulnerability Research Institute 360 Vulnerability Research InstituteAlex Renda Claire Houston Kacper Kwapisz @KKKas_ Adis Alic Sam Lakmaker Ting Ding James Mancz Omar Shibli Lorenzo Cavallaro Harry Lewandowski Abhay Kailasia @abhay_kailasia Lakshmi Narain College Of Technology Bhopal IndiaPeter Nguyễn Vũ Hoàng @peternguyen14 STAR Labs SG PteTomi Tokics @tomitokics iTomsn0wZhipeng Huo @R3dF09 Tencent Security Xuanwu LabNoah Roskin-Frazee Pr
Affected Software | Affected Version | How to fix |
---|---|---|
Apple macOS | <14.1 | 14.1 |
Apple iOS, iPadOS, and watchOS | <10.1 | 10.1 |
Apple iOS and iPadOS | <17.1 | 17.1 |
Apple iOS, iPadOS, and macOS | <17.1 | 17.1 |
Apple iOS and iPadOS | <16.7.2 | 16.7.2 |
Apple iOS, iPadOS, and macOS | <16.7.2 | 16.7.2 |
Apple iOS, iPadOS, and macOS | <16.7.2 | |
Apple iOS, iPadOS, and macOS | >=17.0<17.1 | |
iPhone OS | <16.7.2 | |
iPhone OS | >=17.0<17.1 | |
macOS | >=14.0<14.1 | |
Apple iOS, iPadOS, and watchOS | <10.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Appears in the following advisories)
(Found alongside the following vulnerabilities)
The vulnerability ID for this issue is CVE-2023-41982.
The vulnerability allows an attacker with physical access to use Siri to access sensitive user data.
This vulnerability affects macOS Sonoma 14.1, watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1.
This vulnerability was addressed by restricting options offered on a locked device.
You can find more information about this vulnerability on the Apple support website: [link](https://support.apple.com/en-us/HT213981), [link](https://support.apple.com/en-us/HT213984), [link](https://support.apple.com/en-us/HT213988).