VDB
GHSA-xr44-9893-8w63
GHSA-xr44-9893-8w63
PUBLISHED
CVSS 6.800000190734863 MEDIUM
Record from GitHub Advisory Database · Published October 25, 2023
This issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sonoma 14.1, watchOS 10.1, iOS 17.1 and iPadOS 17.1. An attacker with physical access may be able to use Siri to access sensitive user data.
Risk scores
CVSS 3.1
6.800000190734863
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Timeline
- Oct 25, 2023 CVE Published
- May 1, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-xr44-9893-8w63
vulnetix vdb fixes GHSA-xr44-9893-8w63Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-xr44-9893-8w63/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://nvd.nist.gov/vuln/detail/CVE-2023-41988 advisory
- http://seclists.org/fulldisclosure/2023/Oct/19 url
- http://seclists.org/fulldisclosure/2023/Oct/24 url
- http://seclists.org/fulldisclosure/2023/Oct/25 url
- https://support.apple.com/en-us/HT213982 advisory
- https://support.apple.com/en-us/HT213984 advisory
- https://support.apple.com/kb/HT213988 advisory
- https://support.apple.com/en-us/HT213988 advisory
- https://support.apple.com/kb/HT213982 advisory
- https://support.apple.com/kb/HT213984 advisory