Vulnerability record/PUBLISHED/Published May 8, 2023 00:00:00 UTC

CVE-2023-28178

A logic issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. An app may be able to bypass Privacy preferences.

Base score5.5/ 10

SeverityMediumCVSS 3.1

Exploitability / impact

CVSS metric breakdown

Vector-derived attributes

Base severityMedium

Attack vectorLocalAV

Attack complexityLowAC

Privileges requiredNonePR

User interactionRequiredUI

ScopeUnchangedS

Confidentiality impactNoneC

Integrity impactHighI

Availability impactNoneA

CVSS vector stringCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

CVSS communicates standardized severity and impact characteristics. It does not establish whether a system is exploitable in your specific environment.

Record context

CVE Numbering Authorityapple

Last updatedJan 29, 2025 15:15:41 UTC

PublishedMay 8, 2023 00:00:00 UTC

ReservedMar 13, 2023 00:00:00 UTC