CVE-2023-40443 : The issue was addressed with improved checks. This issue is fixed in iOS 17 and

The issue was addressed with improved checks. This issue is fixed in iOS 17 and iPadOS 17. An app may be able to gain root privileges.

Published 2023-09-27 15:19:16

Updated 2023-12-22 22:15:08

Source Apple Inc.

View at NVD, CVE.org

Products affected by CVE-2023-40443

Apple » Iphone Os
Versions before (<) 17.0
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Matching versions
Apple » Ipados
Versions before (<) 17.0
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
Matching versions

EPSS FAQ

0.05%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 17 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	1.8	5.9	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: None User Interaction: Required Scope: Unchanged Confidentiality: High Integrity: High Availability: High

https://support.apple.com/en-us/HT213938

About the security content of iOS 17 and iPadOS 17 - Apple Support
Vendor Advisory

CVEs referencing this url
https://support.apple.com/kb/HT213940

About the security content of macOS Sonoma 14 - Apple Support

CVEs referencing this url
http://seclists.org/fulldisclosure/2023/Oct/8

Full Disclosure: APPLE-SA-09-26-2023-7 iOS 17 and iPadOS 17
Mailing List;Third Party Advisory

CVEs referencing this url

Jump to