VULNERABILITY INTELLIGENCE

CVE-2023-41988

CVSS score6.8 MEDIUM

EPSS probability0.59%

CISA KEVNot currently listed

Published2023-10-25

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

This issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sonoma 14.1, watchOS 10.1, iOS 17.1 and iPadOS 17.1. An attacker with physical access may be able to use Siri to access sensitive user data.

Weakness classification

nvd@nist.gov: NVD-CWE-noinfo
134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-200

Primary references

product-security@apple.com — Mailing List, Third Party Advisory
product-security@apple.com — Mailing List, Third Party Advisory
product-security@apple.com — Mailing List, Third Party Advisory
product-security@apple.com — Release Notes, Vendor Advisory
product-security@apple.com — Release Notes, Vendor Advisory
product-security@apple.com — Release Notes, Vendor Advisory
product-security@apple.com — Release Notes, Vendor Advisory
product-security@apple.com — Release Notes, Vendor Advisory
product-security@apple.com — Release Notes, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory