#VU71447 Information disclosure in macOS

Published: 2023-01-23

Vulnerability identifier: #VU71447

Vulnerability risk: Low

CVSSv3.1: 2.7 [CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-23498


Exploitation vector: Network

Exploit availability: No

Vulnerable software:
Operating systems & Components / Operating system

Vendor: Apple Inc.


The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to an error in Mail Drafts implementation when forwarding emails. The quoted original message may be selected from the wrong email when forwarding an email from an Exchange account and lead to information disclosure.

Install updates from vendor's website.

Vulnerable software versions

macOS: 13.0 22A380 - 13.1 22C65

External links

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

Latest bulletins with this vulnerability