CVE-2023-42943

MEDIUM

macOS < 14.0 - Unprotected Sensitive Location Data Exposure via Log Entries

Title source: llm

Description

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma 14. An app may be able to read sensitive location information.

References (1)

Core 1

Core References

Release Notes, Vendor Advisory

https://support.apple.com/en-us/HT213940

Scores

CVSS v3 5.5

EPSS 0.0018

EPSS Percentile 7.9%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-125

Status published

Products (1)

apple/macos < 14.0

Published Jul 29, 2024

Tracked Since Feb 18, 2026