5.5

CVE-2023-32388

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in watchOS 9.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. An app may be able to bypass Privacy preferences.

Data is provided by the National Vulnerability Database (NVD)
Apple ≫ iPadOS Version < 15.7.6
Apple ≫ iPadOS Version >= 16.0 < 16.5
Apple ≫ iPhone OS Version < 15.7.6
Apple ≫ iPhone OS Version >= 16.0 < 16.5
Apple ≫ macOS Version >= 11.0 < 11.7.7
Apple ≫ macOS Version >= 12.0.0 < 12.6.6
Apple ≫ macOS Version >= 13.0 < 13.4
Apple ≫ watchOS Version < 9.5
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.01% 0.008
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
CWE-281 Improper Preservation of Permissions

The product does not preserve permissions or incorrectly preserves permissions when copying, restoring, or sharing objects, which can cause them to have less restrictive permissions than intended.

https://support.apple.com/en-us/HT213758
Vendor Advisory
Release Notes