First published: Wed Oct 25 2023(Updated: )
A permissions issue was addressed with additional restrictions. This issue is fixed in tvOS 17.1, watchOS 10.1, macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1. An app may be able to access sensitive user data.
Credit: Michael (Biscuit) Thomas - @social.lol @biscuit product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
Apple macOS | <14.1 | 14.1 |
watchOS | <10.1 | 10.1 |
tvOS | <17.1 | 17.1 |
iPadOS | <17.1 | |
Apple iPhone OS | <17.1 | |
Apple macOS | =14.0 | |
tvOS | <17.1 | |
watchOS | <10.1 | |
Apple iOS | <17.1 | 17.1 |
iPadOS | <17.1 | 17.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2023-42953 has been classified as a permissions issue that could allow an app to access sensitive user data.
To resolve CVE-2023-42953, update your device to tvOS 17.1, watchOS 10.1, macOS Sonoma 14.1, iOS 17.1, or iPadOS 17.1.
CVE-2023-42953 affects Apple iOS, iPadOS, macOS Sonoma, tvOS, and watchOS prior to their respective fixed versions.
The issue described in CVE-2023-42953 was addressed in the updates released on October 25, 2023.
Yes, CVE-2023-42953 can potentially lead to unauthorized access to sensitive user data if not mitigated by the mentioned updates.