CVE-2023-34352

CVSS 3.1 Score 5.3 of 10 (medium)

Details

Published Sep 6, 2023
Updated: Sep 9, 2023
CWE ID 276

Summary

CVE-2023-34352 is a permissions issue that has been resolved in the latest updates of macOS Ventura, tvOS, iOS, and iPadOS. This vulnerability allowed attackers to potentially access user account emails due to insufficient redaction of sensitive information. The impacted systems include macOS Ventura 13.3 and older, tvOS 16.4 and earlier, iOS 16.4 and earlier, and iPadOS 16.4 and earlier. With the deployment of macOS Ventura 13.4, tvOS 16.5, iOS 16.5, and iPadOS 16.5, as well as watchOS 9.5, users can now mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Apple (iPhone OS)
  • tvOS
  • Apple Watch
  • iPadOS
  • MacOS

Affected Vendors

  • Apple

Advisories, Assessments, and Mitigations