CVE-2023-27964

5.4 mediumEPSS 8.2%

Medium (5.4) in apple airpods firmware. EPSS 8.2% chance of exploitation in the next 30 days.

An authentication issue was addressed with improved state management. This issue is fixed in AirPods Firmware Update 5E133. When your headphones are seeking a connection request to one of your previously paired devices, an attacker in Bluetooth range might be able to spoof the intended source device and gain access to your headphones.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

EPSS: 8.2% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
CWE: CWE-290
Published: 2023-06-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

apple:airpods_firmware

References

https://support.apple.com/en-us/HT213752
https://support.apple.com/en-us/HT213752

Check your stack JSON