{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-32437", "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c", "state": "PUBLISHED", "assignerShortName": "apple", "dateReserved": "2023-05-08T22:31:41.835Z", "datePublished": "2023-07-26T23:55:04.827Z", "dateUpdated": "2024-10-23T14:07:11.941Z"}, "containers": {"cna": {"problemTypes": [{"descriptions": [{"lang": "en", "description": "An app may be able to break out of its sandbox"}]}], "affected": [{"vendor": "Apple", "product": "iOS and iPadOS", "versions": [{"version": "unspecified", "status": "affected", "lessThan": "16.6", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "value": "The issue was addressed with improvements to the file handling protocol. This issue is fixed in iOS 16.6 and iPadOS 16.6. An app may be able to break out of its sandbox."}], "references": [{"url": "https://support.apple.com/en-us/HT213841"}, {"url": "https://support.apple.com/kb/HT213757"}, {"url": "https://support.apple.com/kb/HT213761"}, {"url": "https://support.apple.com/kb/HT213764"}, {"url": "https://support.apple.com/kb/HT213758"}], "providerMetadata": {"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c", "shortName": "apple", "dateUpdated": "2023-07-27T03:45:24.632Z"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T15:18:37.132Z"}, "title": "CVE Program Container", "references": [{"url": "https://support.apple.com/en-us/HT213841", "tags": ["x_transferred"]}, {"url": "https://support.apple.com/kb/HT213757", "tags": ["x_transferred"]}, {"url": "https://support.apple.com/kb/HT213761", "tags": ["x_transferred"]}, {"url": "https://support.apple.com/kb/HT213764", "tags": ["x_transferred"]}, {"url": "https://support.apple.com/kb/HT213758", "tags": ["x_transferred"]}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-10-23T14:07:03.758242Z", "id": "CVE-2023-32437", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-23T14:07:11.941Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://support.apple.com/en-us/HT213841", "tags": ["x_transferred"]}, {"url": "https://support.apple.com/kb/HT213757", "tags": ["x_transferred"]}, {"url": "https://support.apple.com/kb/HT213761", "tags": ["x_transferred"]}, {"url": "https://support.apple.com/kb/HT213764", "tags": ["x_transferred"]}, {"url": "https://support.apple.com/kb/HT213758", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T15:18:37.132Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-32437", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-10-23T14:07:03.758242Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-23T14:07:08.011Z"}}], "cna": {"affected": [{"vendor": "Apple", "product": "iOS and iPadOS", "versions": [{"status": "affected", "version": "unspecified", "lessThan": "16.6", "versionType": "custom"}]}], "references": [{"url": "https://support.apple.com/en-us/HT213841"}, {"url": "https://support.apple.com/kb/HT213757"}, {"url": "https://support.apple.com/kb/HT213761"}, {"url": "https://support.apple.com/kb/HT213764"}, {"url": "https://support.apple.com/kb/HT213758"}], "descriptions": [{"lang": "en", "value": "The issue was addressed with improvements to the file handling protocol. This issue is fixed in iOS 16.6 and iPadOS 16.6. An app may be able to break out of its sandbox."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "An app may be able to break out of its sandbox"}]}], "providerMetadata": {"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c", "shortName": "apple", "dateUpdated": "2023-07-27T03:45:24.632Z"}}}, "cveMetadata": {"cveId": "CVE-2023-32437", "state": "PUBLISHED", "dateUpdated": "2024-10-23T14:07:11.941Z", "dateReserved": "2023-05-08T22:31:41.835Z", "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c", "datePublished": "2023-07-26T23:55:04.827Z", "assignerShortName": "apple"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*", "matchCriteriaId": "F362BEC4-90C7-4305-BFF9-645FE6C52DFE", "versionEndExcluding": "16.6", "vulnerable": true}, {"criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*", "matchCriteriaId": "DB63BAC2-C756-428C-8BAC-BAD39FBE5EF4", "versionEndExcluding": "16.6", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "The issue was addressed with improvements to the file handling protocol. This issue is fixed in iOS 16.6 and iPadOS 16.6. An app may be able to break out of its sandbox."}], "id": "CVE-2023-32437", "lastModified": "2024-11-21T08:03:21.103", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 8.6, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 6.0, "source": "[email protected]", "type": "Primary"}]}, "published": "2023-07-27T00:15:15.013", "references": [{"source": "[email protected]", "tags": ["Release Notes", "Vendor Advisory"], "url": "https://support.apple.com/en-us/HT213841"}, {"source": "[email protected]", "url": "https://support.apple.com/kb/HT213757"}, {"source": "[email protected]", "url": "https://support.apple.com/kb/HT213758"}, {"source": "[email protected]", "url": "https://support.apple.com/kb/HT213761"}, {"source": "[email protected]", "url": "https://support.apple.com/kb/HT213764"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Release Notes", "Vendor Advisory"], "url": "https://support.apple.com/en-us/HT213841"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://support.apple.com/kb/HT213757"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://support.apple.com/kb/HT213758"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://support.apple.com/kb/HT213761"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://support.apple.com/kb/HT213764"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "[email protected]", "type": "Primary"}]}

{}