CVE-2023-42957

LOW

iPadOS < 17.0 - Unauthorized Sensitive Location Information Access

Title source: llm

Description

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14, watchOS 10. An app may be able to read sensitive location information.

References (3)

Core 3

Core References

Release Notes, Vendor Advisory

https://support.apple.com/en-us/HT213937

Release Notes, Vendor Advisory

https://support.apple.com/en-us/HT213938

Release Notes, Vendor Advisory

https://support.apple.com/en-us/HT213940

Scores

CVSS v3 3.3

EPSS 0.0009

EPSS Percentile 24.7%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-284

Status published

Products (4)

apple/ipados < 17.0

apple/iphone_os < 17.0

apple/macos < 14.0

apple/watchos < 10.0

Published Jul 29, 2024

Tracked Since Feb 18, 2026