5.5

CVE-2023-27942

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Big Sur 11.7.5, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. An app may be able to access user-sensitive data.

Data is provided by the National Vulnerability Database (NVD)
Apple ≫ iPadOS Version < 16.4
Apple ≫ iPhone OS Version < 16.4
Apple ≫ macOS Version < 12.6.4
Apple ≫ macOS Version >= 13.0 < 13.3
Apple ≫ tvOS Version < 16.4
Apple ≫ watchOS Version < 9.4
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.04% 0.09
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
134c704f-9b21-4f2e-91b3-4a467353bcc0 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CWE-922 Insecure Storage of Sensitive Information

The product stores sensitive information without properly limiting read or write access by unauthorized actors.

https://support.apple.com/en-us/HT213670
Vendor Advisory
Release Notes
https://support.apple.com/en-us/HT213677
Vendor Advisory
Release Notes
https://support.apple.com/en-us/HT213676
Vendor Advisory
Release Notes
https://support.apple.com/en-us/HT213674
Vendor Advisory
Release Notes
https://support.apple.com/en-us/HT213678
Vendor Advisory
Release Notes