Lucene search

[email protected]NVD:CVE-2023-32425

HistorySep 06, 2023 - 2:15 a.m.

CVE-2023-32425

2023-09-0602:15:09

[email protected]

web.nvd.nist.gov

memory handling

privilege elevation

ios 16.5

ipados 16.5

watchos 9.5

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

19.7%

JSON

The issue was addressed with improved memory handling. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5. An app may be able to gain elevated privileges.

Affected configurations

Nvd

Node

appleipad_osRange<16.5

appleiphone_osRange<16.5

applewatchosRange<9.5

VendorProductVersionCPE
appleipad_os*cpe:2.3:o:apple:ipad_os:*:*:*:*:*:*:*:*
appleiphone_os*cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
applewatchos*cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
apple	ipad_os	*	cpe:2.3:o:apple:ipad_os::::::::
apple	iphone_os	*	cpe:2.3:o:apple:iphone_os::::::::
apple	watchos	*	cpe:2.3:o:apple:watchos::::::::

References

support.apple.com/en-us/HT213757

support.apple.com/en-us/HT213764

support.apple.com/kb/HT213757

support.apple.com/kb/HT213764

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

19.7%

JSON

Related for NVD:CVE-2023-32425

cve1 vulnrichment1 prion1 cvelist1 apple3