CVE-2023-32415

MEDIUM

Apple Ipados < 16.5 - Denial of Service

Title source: rule
STIX 2.1

Description

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 16.5 and iPadOS 16.5, tvOS 16.5, macOS Ventura 13.4. An app may be able to read sensitive location information.

Scores

CVSS v3 5.5
EPSS 0.0004
EPSS Percentile 11.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-922
Status published
Products (4)
apple/ipados 16.0 - 16.5
apple/iphone_os 16.0 - 16.5
apple/macos 13.0 - 13.4
apple/tvos < 16.5
Published Jun 23, 2023
Tracked Since Feb 18, 2026