Main Vulnerability Database Vulnerabilities #VU84087

Information disclosure in Apple iOS and iPadOS - CVE-2023-42897

Published: December 11, 2023

Vulnerability identifier: #VU84087

CSH Severity: Low

CVSS v4.0: CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2023-42897

CWE-ID: CWE-200

Exploitation vector: Local access

Exploit availability: No public exploit available

Vendor: Apple Inc.

Affected software:
Apple iOS
iPadOS

Detailed vulnerability description

The vulnerability allows an attacker to gain access to potentially sensitive information.

The vulnerability exists due to an error in Siri. An attacker with physical access to device can use Siri to access sensitive user data.

Install updates from vendor's website.