{"id":"CVE-2023-32400","state":"PUBLISHED","title":"This issue was addressed with improved checks. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, macOS Ventura 13.4. Entitlements and privacy permissions granted to thi","description":"This issue was addressed with improved checks. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, macOS Ventura 13.4. Entitlements and privacy permissions granted to this app may be used by a malicious app.","publishedAt":"2023-06-23T00:00:00.000Z","updatedAt":"2025-02-13T16:50:58.514Z","severity":null,"assigner":"apple","products":["Apple macOS","Apple watchOS","Apple iOS and iPadOS"],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"version":"unspecified","status":"affected","lessThan":"13.4","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"version":"unspecified","status":"affected","lessThan":"9.5","versionType":"custom"}]},{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"version":"unspecified","status":"affected","lessThan":"16.5","versionType":"custom"}]}],"references":["https://support.apple.com/en-us/HT213758","https://support.apple.com/en-us/HT213764","https://support.apple.com/en-us/HT213757","https://support.apple.com/kb/HT213761"],"weaknesses":["CWE-281"],"ingestedAt":"2026-10-29T20:06:00.499Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/32xxx/CVE-2023-32400.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-32400","state":"PUBLISHED","datePublished":"2023-06-23T00:00:00.000Z","dateUpdated":"2025-02-13T16:50:58.514Z","assignerShortName":"apple","assignerOrgId":"286789f9-fbc2-4510-9f9a-43facdede74c","dateReserved":"2023-05-08T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"This issue was addressed with improved checks. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, macOS Ventura 13.4. Entitlements and privacy permissions granted to this app may be used by a malicious app."}],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"version":"unspecified","status":"affected","lessThan":"13.4","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"version":"unspecified","status":"affected","lessThan":"9.5","versionType":"custom"}]},{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"version":"unspecified","status":"affected","lessThan":"16.5","versionType":"custom"}]}],"references":[{"url":"https://support.apple.com/en-us/HT213758"},{"url":"https://support.apple.com/en-us/HT213764"},{"url":"https://support.apple.com/en-us/HT213757"},{"url":"https://support.apple.com/kb/HT213761"}],"problemTypes":[{"descriptions":[{"lang":"en","description":"Entitlements and privacy permissions granted to this app may be used by a malicious app"}]}],"providerMetadata":{"shortName":"apple","orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","dateUpdated":"2023-09-06T07:06:20.278Z"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://support.apple.com/en-us/HT213758","tags":["x_transferred"]},{"url":"https://support.apple.com/en-us/HT213764","tags":["x_transferred"]},{"url":"https://support.apple.com/en-us/HT213757","tags":["x_transferred"]},{"url":"https://support.apple.com/kb/HT213761","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T15:18:36.034Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-12-05T15:57:23.887363Z","id":"CVE-2023-32400","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-281","type":"CWE","lang":"en","description":"CWE-281 Improper Preservation of Permissions"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-12-05T15:58:14.030Z"}}]}}}