VULNERABILITY INTELLIGENCE

CVE-2023-40405

CVSS score3.3 LOW

EPSS probability0.33%

CISA KEVNot currently listed

Published2023-10-25

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Description

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma 14.1. An app may be able to read sensitive location information.

Weakness classification

nvd@nist.gov: CWE-532

Primary references

product-security@apple.com — Mailing List, Third Party Advisory
product-security@apple.com — Release Notes, Vendor Advisory
product-security@apple.com — Release Notes, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Release Notes, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Release Notes, Vendor Advisory