CVE-2023-42846

CVSS 3.1 Score 5.3 of 10 (medium)

Details

Published Oct 25, 2023
Updated: Nov 2, 2023

Summary

CVE-2023-42846 is a vulnerability that allowed devices to be passively tracked through their Wi-Fi MAC addresses. Apple addressed this issue by removing the vulnerable code in watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, tvOS 17.1, iOS 17.1, and iPadOS 17.1. Devices were at risk of being tracked without the user's knowledge or consent. This vulnerability has been mitigated with the release of these updated operating systems.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share