CVE-2023-27963 : The issue was addressed with additional permissions checks. This issue is fixed

The issue was addressed with additional permissions checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. A shortcut may be able to use sensitive data with certain actions without prompting the user.

Published 2023-05-08 20:15:19

Updated 2024-12-12 14:26:19

Source Apple Inc.

View at NVD, CVE.org

Products affected by CVE-2023-27963

Apple » Iphone Os
Versions before (<) 15.7.4
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Matching versions
Apple » Iphone Os
Versions from including (>=) 16.0 and before (<) 16.4
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Matching versions
Apple » Watchos
Versions before (<) 9.4
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
Matching versions
Apple » Macos
Versions from including (>=) 12.0 and before (<) 12.6.4
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Matching versions
Apple » Macos
Versions from including (>=) 13.0 and before (<) 13.3
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Matching versions
Apple » Ipados
Versions before (<) 15.7.4
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
Matching versions
Apple » Ipados
Versions from including (>=) 16.0 and before (<) 16.4
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2023-27963

EPSS FAQ

0.18%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 56 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2023-27963

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	3.9	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None

References for CVE-2023-27963

https://support.apple.com/kb/HT213674

About the security content of tvOS 16.4 - Apple Support

CVEs referencing this url
https://support.apple.com/en-us/HT213678

About the security content of watchOS 9.4 - Apple Support
Vendor Advisory

CVEs referencing this url
https://support.apple.com/en-us/HT213673

About the security content of iOS 15.7.4 and iPadOS 15.7.4 - Apple Support
Vendor Advisory

CVEs referencing this url
https://support.apple.com/en-us/HT213674

About the security content of tvOS 16.4 - Apple Support

CVEs referencing this url
http://seclists.org/fulldisclosure/2023/May/7

Full Disclosure: APPLE-SA-2023-03-27-2 iOS 15.7.4 and iPadOS 15.7.4

CVEs referencing this url
https://support.apple.com/en-us/HT213676

About the security content of iOS 16.4 and iPadOS 16.4 - Apple Support
Vendor Advisory

CVEs referencing this url
https://support.apple.com/en-us/HT213670

About the security content of macOS Ventura 13.3 - Apple Support
Vendor Advisory

CVEs referencing this url
https://support.apple.com/en-us/HT213677

About the security content of macOS Monterey 12.6.4 - Apple Support
Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2023-27963

Products affected by CVE-2023-27963

Exploit prediction scoring system (EPSS) score for CVE-2023-27963

CVSS scores for CVE-2023-27963

References for CVE-2023-27963