CVE-2023-42923: Race Condition
First published: Mon Dec 11 2023(Updated: )
Accessibility. A privacy issue was addressed with improved private data redaction for log entries.
Credit: ARJUN S D product-security@apple.com Noah Roskin-Frazee Pr Kirin @Pwnrin Mickey Jin @patch1t an anonymous researcher Marc Newlin SkySafeChristopher Reynolds Aymane Chabat Wojciech Regula SecuRingZhenjiang Zhao Pangu TeamQianxin Junsung Lee Meysam Firouzi @R00tkitSMM Michael DePlante @izobashi Trend Micro Zero Day InitiativePan ZhenPeng @Peterpan0927 STAR Labs SG PteEloi Benoist-Vanderbeken @elvanderb SynacktivCVE-2023-42893 Csaba Fitzl @theevilbit OffSecAndrew Goldberg The McCombs School of BusinessThe University Texas at AustinZhongquan Li @Guluisacat Dawn Security Lab of JingDongCsaba Fitzl @theevilbit Offensive SecurityJoshua Jewett @JoshJewett33 Pwn2car Zoom Offensive Security Team Nan Wang @eternalsakura13 360 Vulnerability Research Instituterushikesh nandedkar SungKwon Lee (Demon.Team)
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apple iOS and iPadOS | <17.2 | 17.2 |
| Apple iOS, iPadOS, and macOS | <17.2 | 17.2 |
| Apple iOS, iPadOS, and macOS | <17.2 | |
| iPhone OS | <17.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Peer vulnerabilities
(Found alongside the following vulnerabilities)
- CVE-2023-42937
- CVE-2023-42919
- CVE-2023-42896
- CVE-2023-42884
- CVE-2023-45866
- CVE-2023-42941
- CVE-2023-42962
- CVE-2023-42922
- CVE-2023-42898
- CVE-2023-42899
- CVE-2023-42888
- CVE-2023-42974
- CVE-2023-42914
- CVE-2023-42893
- CVE-2023-42923
- CVE-2023-42936
- CVE-2023-42897
- CVE-2023-42947
- CVE-2023-40389
- CVE-2023-42890
- CVE-2023-42883
- CVE-2023-42950
- CVE-2023-42956
Frequently Asked Questions
What is the severity of CVE-2023-42923?
The severity of CVE-2023-42923 is high due to the potential for unauthorized access to private browsing tabs.
How do I fix CVE-2023-42923?
You can fix CVE-2023-42923 by updating to iOS 17.2 or iPadOS 17.2.
What are the affected versions in CVE-2023-42923?
CVE-2023-42923 affects versions of iOS and iPadOS prior to 17.2.
What impact does CVE-2023-42923 have on users?
CVE-2023-42923 allows unauthorized access to Private Browsing tabs without user authentication.
Which devices are vulnerable to CVE-2023-42923?
Devices running iOS and iPadOS versions before 17.2 are vulnerable to CVE-2023-42923.
- agent/type
- agent/first-publish-date
- agent/severity
- collector/mitre-cve
- source/MITRE
- agent/trending
- agent/source
- agent/last-modified-date
- agent/references
- agent/weakness
- agent/author
- agent/description
- agent/event
- agent/tags
- agent/softwarecombine
- collector/apple-support
- source/Apple
- alias/CVE-2023-42896
- alias/CVE-2023-42884
- alias/CVE-2023-45866
- alias/CVE-2023-42941
- alias/CVE-2023-42962
- alias/CVE-2023-42922
- alias/CVE-2023-42898
- alias/CVE-2023-42899
- alias/CVE-2023-42888
- alias/CVE-2023-42974
- alias/CVE-2023-42914
- alias/CVE-2023-42893
- alias/CVE-2023-42923
- alias/CVE-2023-42936
- alias/CVE-2023-42897
- alias/CVE-2023-42947
- alias/CVE-2023-40389
- alias/CVE-2023-42890
- alias/CVE-2023-42883
- alias/CVE-2023-42950
- alias/CVE-2023-42956
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- alias/CVE-2023-42919
- collector/nvd-api
- vendor/apple
- canonical/apple ios and ipados
- canonical/apple ios, ipados, and macos
- canonical/iphone os