CVE-2023-32416

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Jul 27, 2023
Updated: Aug 1, 2023

Summary

CVE-2023-32416 is a logic issue that has been addressed in multiple Apple operating systems and devices. The vulnerability allowed certain applications to access sensitive location information. This issue has been resolved with improved restrictions in macOS Monterey 12.6.8, iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5, and watchOS 9.6. By implementing these fixes, Apple mitigates the risk of unauthorized access to users' location data.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Apple (iPhone OS)
  • Apple Watch
  • iPadOS
  • MacOS
  • WatchOS

Affected Vendors

  • Apple