CVE-2023-23523

LOW

iPadOS < 16.4 - Unauthenticated Hidden Photos Album Access via Visual Lookup

Title source: llm

Description

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4. Photos belonging to the Hidden Photos Album could be viewed without authentication through Visual Lookup.

References (2)

Core 2

Core References

Release Notes, Vendor Advisory

https://support.apple.com/en-us/HT213670

Release Notes, Vendor Advisory

https://support.apple.com/en-us/HT213676

Scores

CVSS v3 3.3

EPSS 0.0011

EPSS Percentile 28.3%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

Status published

Products (3)

apple/ipados < 16.4

apple/iphone_os < 16.4

apple/macos < 13.3

Published May 08, 2023

Tracked Since Feb 18, 2026