CVE-2023-41988

MEDIUM Year: 2023
CVSS v3 Score
6.8
Medium
Weakness Type
CWE-200
View all →

Vulnerability Description

This issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sonoma 14.1, watchOS 10.1, iOS 17.1 and iPadOS 17.1. An attacker with physical access may be able to use Siri to access sensitive user data.

Related Vulnerabilities

CVE-2016-0723

MEDIUM
CVSS:6.8(Medium)

Race condition in the tty_ioctl function in drivers/tty/tty_io.c in the Linux kernel through 4.4.1 allows local users to obtain sensitive information from kernel memory or cause a denial of service (u...

CWE-2002016

CVE-2016-1187

MEDIUM
CVSS:6.8(Medium)

Cybozu KUNAI for iPhone 2.0.3 through 3.1.5 and for Android 2.1.2 through 3.0.4 does not verify SSL certificates.

CWE-2002016

CVE-2016-2981

MEDIUM
CVSS:6.8(Medium)

An undisclosed vulnerability in the CLM applications in IBM Jazz Team Server may allow unauthorized access to user credentials. IBM Reference #: 1999965.

CWE-2002016

CVE-2016-5972

MEDIUM
CVSS:6.8(Medium)

IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance 2.x before 2.0.2 FP8 uses weak permissions for unspecified resources, which allows remote authenticated users to obtain sensitive inf...

CWE-2002016

CVE-2016-6034

MEDIUM
CVSS:6.8(Medium)

IBM Tivoli Storage Manager for Virtual Environments (VMware) could disclose the Windows domain credentials to a user with a high level of privileges.

CWE-2002016

CVE-2017-7526

MEDIUM
CVSS:6.8(Medium)

libgcrypt before version 1.7.8 is vulnerable to a cache side-channel attack resulting into a complete break of RSA-1024 while using the left-to-right method for computing the sliding-window expansion....

CWE-2002017