CVE-2023-28826

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, macOS Monterey 12.7.4, macOS Sonoma 14.1, macOS Ventura 13.6.5. An app may be able to access sensitive user data.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
Apple	macOS	>= unspecified, < 12.7
Apple	macOS	>= unspecified, < 14.1
Apple	iOS and iPadOS	>= unspecified, < 16.7
Apple	macOS	>= unspecified, < 13.6

References

http://seclists.org/fulldisclosure/2024/Mar/22Mailing List, Third Party Advisory
http://seclists.org/fulldisclosure/2024/Mar/23Mailing List, Third Party Advisory
https://support.apple.com/en-us/HT213984Vendor Advisory
https://support.apple.com/en-us/HT214082Vendor Advisory
https://support.apple.com/en-us/HT214083Vendor Advisory
https://support.apple.com/en-us/HT214085Vendor Advisory
https://support.apple.com/kb/HT213984Vendor Advisory
http://seclists.org/fulldisclosure/2024/Mar/22Mailing List, Third Party Advisory
http://seclists.org/fulldisclosure/2024/Mar/23Mailing List, Third Party Advisory
https://support.apple.com/en-us/HT213984Vendor Advisory
https://support.apple.com/en-us/HT214082Vendor Advisory
https://support.apple.com/en-us/HT214083Vendor Advisory
https://support.apple.com/en-us/HT214085Vendor Advisory
https://support.apple.com/kb/HT213984Vendor Advisory
https://support.apple.com/kb/HT214082
https://support.apple.com/kb/HT214083
https://support.apple.com/kb/HT214085

Timeline

Published: Mar 8, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-288275.9A vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC CP 1243-1 (incl. SIPLU CVE-2023-288285.9A vulnerability has been identified in Polarion ALM (All versions < V22R2). The application contains a XML External Entity Injection (XXE) v CVE-2023-288298.8A vulnerability has been identified in SIMATIC NET PC Software V14 (All versions), SIMATIC NET PC Software V15 (All versions), SIMATIC PCS 7 CVE-2023-28838.8Authorization Bypass Through User-Controlled Key vulnerability in CBOT Chatbot allows Authentication Abuse, Authentication Bypass. This iss CVE-2023-288307.8A vulnerability has been identified in JT2Go (All versions < V14.2.0.5), Solid Edge SE2022 (All versions < V222.0 Update 13), Solid Edge SE2 CVE-2023-288317.5The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could cause the application CVE-2023-288327.2A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud Connect 7 CC716 (All versi CVE-2023-288338.8Nextcloud server is an open source home cloud implementation. In affected versions admins of a server were able to upload a logo or a favico CVE-2023-288344.3Nextcloud Server is an open source personal cloud server. Nextcloud Server 24.0.0 until 24.0.6 and 25.0.0 until 25.0.4, as well as Nextcloud CVE-2023-288357.5Nextcloud server is an open source home cloud implementation. In affected versions the generated fallback password when creating a share was CVE-2023-288365.4Wagtail is an open source content management system built on Django. Starting in version 1.5 and prior to versions 4.1.4 and 4.2.2, a stored CVE-2023-288374.9Wagtail is an open source content management system built on Django. Prior to versions 4.1.4 and 4.2.2, a memory exhaustion bug exists in Wa