medium5.3
CVE-2023-42836
A logic issue was addressed with improved checks.
Impact
A logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS Ventura 13.6.3, macOS Sonoma 14.1, macOS Monterey 12.7.2. An attacker may be able to access connected network volumes mounted in the home directory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Ipad Os | before 17.1 |
| Apple | Iphone Os | before 17.1 |
| Apple | Macos | from 12.0 before 12.7.2 from 13.0 before 13.6.3 Version 14.0 |
References
- NVD record
- CVE.org record
- https://support.apple.com/en-us/HT213982
- https://support.apple.com/en-us/HT213984
- https://support.apple.com/en-us/HT214037
- https://support.apple.com/en-us/HT214038
- https://support.apple.com/en-us/HT213982
- https://support.apple.com/en-us/HT213984
- https://support.apple.com/en-us/HT214037
- https://support.apple.com/en-us/HT214038
- https://support.apple.com/kb/HT213982
- https://support.apple.com/kb/HT213984
- https://support.apple.com/kb/HT214037
- https://support.apple.com/kb/HT214038