CVE-2023-34352

Q: What is CVE-2023-34352?

CVE-2023-34352 is a vulnerability that involves a permissions issue in macOS Ventura 13.4, tvOS 16.5, iOS 16.5, iPadOS 16.5, and watchOS 9.5, allowing attackers to potentially leak user account emails.

Q: How severe is CVE-2023-34352?

CVE-2023-34352 has a severity level of 5.3, which is considered medium.

Q: How can I fix CVE-2023-34352?

To fix CVE-2023-34352, update to the fixed versions: macOS Ventura 13.4, tvOS 16.5, iOS 16.5, iPadOS 16.5, and watchOS 9.5.

Q: Where can I find more information about CVE-2023-34352?

You can find more information about CVE-2023-34352 on the official Apple support page: [link].

Q: What is the Common Weakness Enumeration (CWE) for CVE-2023-34352?

The Common Weakness Enumeration (CWE) for CVE-2023-34352 is CWE-276.

Published May 18, 2023

Updated

A permissions issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Ventura 13.4, tvOS 16.5, iOS 16.5 and iPadOS 16.5, watchOS 9.5. An attacker may be able to leak user account emails.

Credit

Sergii Kryvoblotskyi(MacPaw Inc), Kirin@@Pwnrin, Mickey Jin@@patch1t, ABC Research s.r.o., James Duffy (mangoSecure), Adam M., Gerhard Muth, Dimitrios Tatsis(Cisco Talos), Zitong Wu (吴梓桐)(Zhuhai No), Meysam Firouzi@@R00tkitSMM(Mbition Mercedes), Meysam Firouzi@@R00tkitsmm(Trend Micro Zero Day Initiative), hou xuewei vmk msu@@p1ay8y3ar, CertiK SkyFall Team(Pinauten GmbH), Linus Henze(Pinauten GmbH), 08Tc3wBB(Jamf), Adam Doupé(ASU SEFCOM), Eloi Benoist-Vanderbeken@@elvanderb(Synacktiv), Wojciech Reguła@@_r3ggi(SecuRing), OSS-Fuzz(Google Project Zero), Ned Williamson(Google Project Zero), Jonathan Bar Or(Microsoft), Anurag Bohra(Microsoft), (Microsoft), Michael Pearse(Microsoft), Thijs Alkemade@@xnyhps(Computest Sector 7), Gergely Kalman@@gergely_kalman, Michael DePlante@@izobashi(Trend Micro Zero Day Initiative), Thijs Alkemade(Computest Sector 7), Jonathan Fritz, Arsenii Kostromin (0x3c3e), Julian Szulc, Holger Fuhrmannek(Deutsche Telekom Security GmbH on behalf of BSI), Yiğit Can YILMAZ@@yilmazcanyigit(FFRI Security Inc), Koh M. Nakagawa(FFRI Security Inc), Kirin@@Pwnrin(Offensive Security), Jeff Johnson (underpassapp.com)(Offensive Security), (Offensive Security), Csaba Fitzl@@theevilbit(Offensive Security), Wenchao Li(Alibaba Group), Xiaolong Bai(Alibaba Group), Mickey Jin@@patch1t(Tencent Security Xuanwu Lab), Zhipeng Huo@@R3dF09(Tencent Security Xuanwu Lab), an anonymous researcher, Khiem Tran, Gergely Kalman@@gergely_kalman(SecuRing), (SecuRing), Wojciech Reguła(SecuRing), Yiğit Can YILMAZ@@yilmazcanyigit, CVE-2023-22809, Satish Panduranga, Ivan Fratric(Google Project Zero), Wojciech Regula(SecuRing), Ignacio Sanmillan@@ulexec, Clément Lecigne(Google's Threat Analysis Group), Donncha Ó Cearbhaill(Amnesty International), Pan ZhenPeng@@Peterpan0927(STAR Labs SG Pte), Mohamed GHANNAM@@_simo36, Amat Cama(Vigilant Labs), (Google Project Zero), Jiwon Park

Affected Software

11 affected componentsFixes available

Apple tvOS<16.5

16.5

Apple WatchOS<9.5

9.5

Apple macOS Ventura<13.4

13.4

Apple Ipad Os<16.5

Apple iPhone OS<16.5

Apple macOS>=13.0<13.4

Apple tvOS<16.5

Apple WatchOS<9.5

Apple iOS<16.5

16.5

Apple iPadOS<16.5

16.5

Apple iPadOS<16.5

Event History

May 18, 2023

Data Sourced

via Apple·12:00 AM

DescriptionWeaknessAffected Software

Updated

via Apple·12:00 AM

DescriptionWeakness

Updated

via Apple·12:00 AM

Affected Software

Updated

via Apple·12:00 AM

DescriptionWeaknessAffected Software

Sep 6, 2023

CVE Published

via MITRE·01:36 AM

Data Sourced

via MITRE·01:36 AM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2023-34352?

CVE-2023-34352 is a vulnerability that involves a permissions issue in macOS Ventura 13.4, tvOS 16.5, iOS 16.5, iPadOS 16.5, and watchOS 9.5, allowing attackers to potentially leak user account emails.

How severe is CVE-2023-34352?

CVE-2023-34352 has a severity level of 5.3, which is considered medium.

How can I fix CVE-2023-34352?

To fix CVE-2023-34352, update to the fixed versions: macOS Ventura 13.4, tvOS 16.5, iOS 16.5, iPadOS 16.5, and watchOS 9.5.

Where can I find more information about CVE-2023-34352?

You can find more information about CVE-2023-34352 on the official Apple support page: [link].

What is the Common Weakness Enumeration (CWE) for CVE-2023-34352?

The Common Weakness Enumeration (CWE) for CVE-2023-34352 is CWE-276.

CVE-2023-34352

Credit

Affected Software

Event History

Don't miss critical vulnerabilities

Frequently Asked Questions

What is CVE-2023-34352?

How severe is CVE-2023-34352?

How can I fix CVE-2023-34352?

Where can I find more information about CVE-2023-34352?

What is the Common Weakness Enumeration (CWE) for CVE-2023-34352?

Company

Resources

Contact