CVE-2023-27940

MEDIUM | Platform: iPadOS | Changelog

CVE Details

Description

The issue was addressed with additional permissions checks. This issue is fixed in iOS 15.7.6 and iPadOS 15.7.6, macOS Monterey 12.6.6, macOS Ventura 13.4. A sandboxed app may be able to observe system-wide network connections.

CVSS 3.1 Score

Metric	Value
Base Score	6.3 (MEDIUM)
Vector	`CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N`

References

Apple Security Advisory
NVD Entry
https://support.apple.com/en-us/HT213758 (Release Notes, Vendor Advisory)
https://support.apple.com/en-us/HT213759 (Release Notes, Vendor Advisory)
https://support.apple.com/en-us/HT213765 (Release Notes, Vendor Advisory)