CVSS 3.1 Score 3.3 of 10 (low)


Published Sep 27, 2023
Updated: Nov 7, 2023


CVE-2023-40520 is a vulnerability that affects various Apple products, including tvOS, iOS, iPadOS, and watchOS. The issue allows an app to access edited photos saved in a temporary directory. The vulnerability has been remediated in the latest versions of these operating systems, specifically tvOS 17, iOS 17, and iPadOS 17, as well as watchOS 10. This vulnerability poses a low risk to organizations as it requires local access and user interaction. The base severity is rated as low with a base score of 3.3 out of 10 according to the NIST National Vulnerability Database (NVD).


Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-40520 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options