Information disclosure in Apple iOS and iPadOS - CVE-2023-41988

Vulnerability identifier: #VU82419

CSH Severity: Low

CVSS v4.0: CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2023-41988

CWE-ID: CWE-200

Exploitation vector: Local access

Exploit availability: No public exploit available

Vendor: Apple Inc.

Affected software:
Apple iOS
iPadOS

The vulnerability allows a attacker to gain access to potentially sensitive information.

The vulnerability exists due to certain Siri options are present on the locked screen. An attacker with physical access to device can gain access to sensitive information.

Install updates from vendor's website.

• https://support.apple.com/en-us/HT213982