CVE-2023-38614

MEDIUM

iPadOS < 17.0 - Unprotected User Data Exposure via Permissions Issue

Title source: llm

Description

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to access sensitive user data.

References (2)

Core 2

Core References

Release Notes, Vendor Advisory

https://support.apple.com/en-us/120949

Release Notes, Vendor Advisory

https://support.apple.com/en-us/120950

Scores

CVSS v3 4.3

EPSS 0.0020

EPSS Percentile 42.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-269

Status published

Products (3)

apple/ipados < 17.0

apple/iphone_os < 17.0

apple/macos < 14.0

Published Apr 11, 2025

Tracked Since Feb 18, 2026