CVE-2023-40442: Low severity apple macos vulnerability
Published Jul 24, 2023
·Updated
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Big Sur 11.7.9, iOS 15.7.8 and iPadOS 15.7.8, macOS Monterey 12.6.8. An app may be able to read sensitive location information.
Other sources
Accessibility. A privacy issue was addressed with improved private data redaction for log entries.
— Apple
Credit
Nick Brook, Kirin@@Pwnrin, pattern-f@@pattern_F_(Ant Security Light), Mohamed GHANNAM@@_simo36, Wojciech Regula(SecuRing), Kirin@@Pwnrin(SecuRing), (SecuRing), found by OSS-Fuzz, Zweig(Kunlun Lab), 香农的三蹦子(Pangu Lab), an anonymous researcher, Pan ZhenPeng@@Peterpan0927(STAR Labs SG Pte), Peter Nguyễn Vũ Hoàng@@peternguyen14(STAR Labs SG Pte), Certik Skyfall Team, Valentin Pashkov(Kaspersky), Mikhail Vinogradov(Kaspersky), Georgy Kucherin@@kucher1n(Kaspersky), Leonid Bezvershenko@@bzvr_(Kaspersky), (Kaspersky), Boris Larin@@oct0xor(Kaspersky), Kaitao Xie(Alibaba Group), Xiaolong Bai(Alibaba Group), Certik Skyfall Team(Ant Security Light), Sei K., Zhipeng Huo@@R3dF09(Tencent Security Xuanwu Lab), Noah Roskin-Frazee, Thijs Alkemade(Computest Sector 7), Adam M., Johan Carlsson (joaxcar), Hritvik Taneja, Jason Kim, Jie Jeff Xu, Stephan van Schaik, Daniel Genkin, Yuval Yarom, Narendra Bhati (twitter.com/imnarendrabhati)(Suma Soft Pvt), Pune - India(TU Wien), Valentino Dalla Valle(TU Wien), Pedro Bernardo(TU Wien), Marco Squarcina(TU Wien), (TU Wien), Lorenzo Veronese(TU Wien), Pune - India, Yuhao Hu, Jiming Wang, Jikai Ren, Anonymous(Trend Micro Zero Day Initiative), Francisco Alonso@@revskills, Junsung Lee, 이준성(Junsung Lee)(Cross Republic), Apple, YeongHyeon Choi@@hyeon101010
Affected Software
12 affected componentsFixes available
Apple macOS Big Sur<11.7.9
11.7.9
macOS<12.6.8
12.6.8
Apple iOS and iPadOS<16.6
16.6
Apple iOS, iPadOS, and macOS<16.6
16.6
Apple iOS and iPadOS<15.7.8
15.7.8
Apple iOS, iPadOS, and macOS<15.7.8
15.7.8
Apple iOS, iPadOS, and macOS<15.7.8
Apple iOS, iPadOS, and macOS>=16.0<16.6
iPhone OS<15.7.8
iPhone OS>=16.0<16.6
macOS>=11.0<11.7.9
macOS>=12.0.0<12.6.8
Event History
Jul 24, 2023
Data Sourced
via Apple·12:00 AM
DescriptionWeaknessAffected Software
Sep 11, 2023
CVE Published
11:29 PM
Data Sourced
11:29 PM
DescriptionWeakness
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2023-40442
- CVE-2023-34425
- CVE-2023-32364
- CVE-2023-35983
- CVE-2023-40392
- CVE-2023-34241
- CVE-2023-28319
- CVE-2023-28320
- CVE-2023-28321
- CVE-2023-28322
- CVE-2023-41990
- CVE-2023-36854
- CVE-2023-32418
- CVE-2023-32381
- CVE-2023-32433
- CVE-2023-35993
- CVE-2023-38603
- CVE-2023-38590
- CVE-2023-38598
- CVE-2023-37285
- CVE-2023-38604
- CVE-2023-38606
- CVE-2023-32441
- CVE-2023-38565
- CVE-2023-38593
- CVE-2023-38571
- CVE-2023-29491
- CVE-2023-38601
- CVE-2023-32444
- CVE-2023-2953
- CVE-2023-42829
- CVE-2023-38259
- CVE-2023-38602
- CVE-2023-42831
- CVE-2023-32443
- CVE-2023-42832
- CVE-2023-32422
- CVE-2023-32429
- CVE-2023-1801
- CVE-2023-2426
- CVE-2023-2609
- CVE-2023-2610
- CVE-2023-32416
- CVE-2023-36495
- CVE-2023-40440
- CVE-2023-38421
- CVE-2023-38258
- CVE-2023-1916
- CVE-2023-32442
- CVE-2023-38605
- CVE-2023-40439
- CVE-2023-38136
- CVE-2023-38580
- CVE-2023-40437
- CVE-2022-3970
- CVE-2023-32734
- CVE-2023-38261
- CVE-2023-38424
- CVE-2023-38425
- CVE-2023-41995
- CVE-2023-38410
- CVE-2023-40400
- CVE-2023-40394
- CVE-2023-32437
- CVE-2023-40397
- CVE-2023-38599
- CVE-2023-32445
- CVE-2023-38592
- CVE-2023-38572
- CVE-2023-38594
- CVE-2023-38595
- CVE-2023-38600
- CVE-2023-38611
- CVE-2023-37450
- CVE-2023-42866
- CVE-2023-38597
- CVE-2023-38133
- CVE-2023-23540
- CVE-2023-32409
- CVE-2023-43000
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2023-40442.
2
What is the severity rating of CVE-2023-40442?
The severity rating of CVE-2023-40442 is low (3.3).
3
Which software versions are affected by CVE-2023-40442?
CVE-2023-40442 affects iOS 15.7.8, iPadOS 15.7.8, macOS Big Sur 11.7.9, and macOS Monterey 12.6.8.
4
How can an app read sensitive location information due to CVE-2023-40442?
CVE-2023-40442 allows an app to read sensitive location information.
5
Where can I find more information about CVE-2023-40442?
More information about CVE-2023-40442 can be found on the Apple support website.