Main Vulnerability Database Vulnerabilities #VU84087

#VU84087 Information disclosure in Apple iOS and iPadOS - CVE-2023-42897

Published: December 11, 2023

Vulnerability identifier: #VU84087

Vulnerability risk: Low

CVSSv4.0: CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2023-42897

CWE-ID: CWE-200

Exploitation vector: Local access

Exploit availability: No public exploit available

Vulnerable software:
Apple iOS
iPadOS

Software vendor:
Apple Inc.

Description

The vulnerability allows an attacker to gain access to potentially sensitive information.

The vulnerability exists due to an error in Siri. An attacker with physical access to device can use Siri to access sensitive user data.

Install updates from vendor's website.