CVE-2023-23543

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-23543
The issue was addressed with additional restrictions on the observability of app states. This issue is fixed in macOS Ventura 13.3, iOS 15.7.4 and iPadOS 15.7.4, iOS 16.4 and iPadOS 16.4, watchOS 9.4. A sandboxed app may be able to determine which app is currently using the camera.

3.6 /10

CVSS v3 : LOW

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 1.4

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope CHANGED

References
Link Resource
https://support.apple.com/en-us/HT213670 Release Notes Vendor Advisory
https://support.apple.com/en-us/HT213673 Release Notes Vendor Advisory
https://support.apple.com/en-us/HT213676 Release Notes Vendor Advisory
https://support.apple.com/en-us/HT213678
https://support.apple.com/en-us/HT213670 Release Notes Vendor Advisory
https://support.apple.com/en-us/HT213673 Release Notes Vendor Advisory
https://support.apple.com/en-us/HT213676 Release Notes Vendor Advisory
https://support.apple.com/en-us/HT213678
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
History

21 Nov 2024, 07:46

Type Values Removed Values Added
References () https://support.apple.com/en-us/HT213670 - Release Notes, Vendor Advisory () https://support.apple.com/en-us/HT213670 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/HT213673 - Release Notes, Vendor Advisory () https://support.apple.com/en-us/HT213673 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/HT213676 - Release Notes, Vendor Advisory () https://support.apple.com/en-us/HT213676 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/HT213678 - () https://support.apple.com/en-us/HT213678 -

27 Jul 2023, 04:15

Type Values Removed Values Added
References
  • {'url': 'https://support.apple.com/kb/HT213678', 'name': 'https://support.apple.com/kb/HT213678', 'tags': [], 'refsource': 'CONFIRM'}
  • {'url': 'http://seclists.org/fulldisclosure/2023/May/7', 'name': '20230529 APPLE-SA-2023-03-27-2 iOS 15.7.4 and iPadOS 15.7.4', 'tags': [], 'refsource': 'FULLDISC'}
  • (MISC) https://support.apple.com/en-us/HT213678 -
Summary The issue was addressed with additional restrictions on the observability of app states. This issue is fixed in iOS 15.7.4 and iPadOS 15.7.4, iOS 16.4 and iPadOS 16.4, macOS Ventura 13.3. A sandboxed app may be able to determine which app is currently using the camera The issue was addressed with additional restrictions on the observability of app states. This issue is fixed in macOS Ventura 13.3, iOS 15.7.4 and iPadOS 15.7.4, iOS 16.4 and iPadOS 16.4, watchOS 9.4. A sandboxed app may be able to determine which app is currently using the camera.

09 Jun 2023, 00:15

Type Values Removed Values Added
References
  • (CONFIRM) https://support.apple.com/kb/HT213678 -

30 May 2023, 05:15

Type Values Removed Values Added
Summary The issue was addressed with additional restrictions on the observability of app states. This issue is fixed in iOS 15.7.4 and iPadOS 15.7.4, macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4. A sandboxed app may be able to determine which app is currently using the camera The issue was addressed with additional restrictions on the observability of app states. This issue is fixed in iOS 15.7.4 and iPadOS 15.7.4, iOS 16.4 and iPadOS 16.4, macOS Ventura 13.3. A sandboxed app may be able to determine which app is currently using the camera
References
  • (FULLDISC) http://seclists.org/fulldisclosure/2023/May/7 -

19 May 2023, 16:15

Type Values Removed Values Added
Summary The issue was addressed with additional restrictions on the observability of app states. This issue is fixed in macOS Ventura 13.3, iOS 15.7.4 and iPadOS 15.7.4, iOS 16.4 and iPadOS 16.4. A sandboxed app may be able to determine which app is currently using the camera The issue was addressed with additional restrictions on the observability of app states. This issue is fixed in iOS 15.7.4 and iPadOS 15.7.4, macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4. A sandboxed app may be able to determine which app is currently using the camera

16 May 2023, 14:09

Type Values Removed Values Added
CPE cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
CWE NVD-CWE-noinfo
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 3.6
First Time Apple macos
Apple iphone Os
Apple ipados
Apple
References (MISC) https://support.apple.com/en-us/HT213673 - (MISC) https://support.apple.com/en-us/HT213673 - Release Notes, Vendor Advisory
References (MISC) https://support.apple.com/en-us/HT213676 - (MISC) https://support.apple.com/en-us/HT213676 - Release Notes, Vendor Advisory
References (MISC) https://support.apple.com/en-us/HT213670 - (MISC) https://support.apple.com/en-us/HT213670 - Release Notes, Vendor Advisory

08 May 2023, 20:15

Type Values Removed Values Added
New CVE
Information

Published : 2023-05-08 20:15

Updated : 2025-01-29 16:15

NVD link : CVE-2023-23543

Mitre link : CVE-2023-23543

CVE.ORG link : CVE-2023-23543

JSON object : View

Products Affected

apple

  • ipados
  • iphone_os
  • macos
CWE
NVD-CWE-noinfo