← back
CVE-2023-38596

CVE-2023-38596

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.3%
exploitation probability
0.3%top 75% of all CVEs
observed exploitation
nono source reports it
The issue was addressed with improved handling of protocols. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. An app may fail to enforce App Transport Security.
Affected products
Apple · iOS and iPadOSApple · macOSApple · tvOSApple · watchOS
References
http://seclists.org/fulldisclosure/2023/Oct/10http://seclists.org/fulldisclosure/2023/Oct/3http://seclists.org/fulldisclosure/2023/Oct/8http://seclists.org/fulldisclosure/2023/Oct/9https://support.apple.com/en-us/HT213936https://support.apple.com/en-us/HT213937https://support.apple.com/en-us/HT213938https://support.apple.com/en-us/HT213940https://support.apple.com/kb/HT213936https://support.apple.com/kb/HT213937https://support.apple.com/kb/HT213938https://support.apple.com/kb/HT213940