VULNERABILITY INTELLIGENCE

CVE-2023-42897

CVSS score4.6 MEDIUM

EPSS probability0.35%

CISA KEVNot currently listed

Published2023-12-12

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

The issue was addressed with improved checks. This issue is fixed in iOS 17.2 and iPadOS 17.2. An attacker with physical access may be able to use Siri to access sensitive user data.

Primary references

product-security@apple.com — Third Party Advisory
product-security@apple.com — Release Notes, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Release Notes, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108