PT-2023-4784 · Apple · Ios+4

Gergely Kalman + 2 · Publicado 2023-05-18 · Atualizado 2025-07-30 · CVE-2023-32422

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions iOS versions prior to 16.5 iPadOS versions prior to 16.5 tvOS versions prior to 16.5 macOS Ventura versions prior to 13.4 watchOS (affected versions not specified)

Description An application may be able to bypass Privacy preferences due to insufficient protection of registration data. The issue involves SQLite logging restrictions. Exploitation may allow an attacker to bypass existing security limitations and potentially overwrite the TCC database, granting unauthorized access.

Recommendations Update iOS to version 16.5 or later. Update iPadOS to version 16.5 or later. Update tvOS to version 16.5 or later. Update macOS Ventura to version 13.4 or later.

Exploit

Correção

Insertion into Log File

Enumeração de Fraquezas

CWE-532

Identificadores relacionados

BDU:2023-05232

CVE-2023-32422

Produtos afetados

Apple Macos

Ios

Ipados

Macos Ventura

Tvos

Referências · 22

• 🔥 https://github.com/gergelykalman/CVE-2023-32422-a-macOS-TCC-bypass-in-sqlite · Exploit
• https://osv.dev/vulnerability/CVE-2023-32422 · Aviso do Fabricante
• https://support.apple.com/en-us/HT213761 · Aviso do Fabricante
• https://support.apple.com/en-us/HT213758 · Aviso do Fabricante
• https://support.apple.com/en-us/HT213757 · Aviso do Fabricante
• https://twitter.com/SlokaJc/status/1893608519137370527 · Publicação no Twitter
• https://t.me/cvenotify/57881 · Publicação no Telegram
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32422 · Nota
• https://support.apple.com/en-us/HT213844 · Nota
• https://support.apple.com/en-us/106333 · Nota
• https://twitter.com/gergely_kalman/status/1709885800282788229 · Publicação no Twitter
• https://support.apple.com/en-us/120334 · Nota
• https://cybersecurity-help.cz/vdb/SB2023051859 · Nota
• https://support.apple.com/en-us/HT213845 · Nota
• https://support.apple.com/en-us/120333 · Nota