CVE-2023-40393

7.5 highEPSS 0.7%

High (7.5) in apple macos. EPSS 0.7% chance of exploitation in the next 30 days.

An authentication issue was addressed with improved state management. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14. Photos in the Hidden Photos Album may be viewed without authentication.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 53% of CVEs (scores of 2026-10-31)
CWE: CWE-306
Published: 2024-01-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

apple:macos

References

https://support.apple.com/en-us/120949
https://support.apple.com/en-us/120950
https://support.apple.com/en-us/HT213940
https://support.apple.com/kb/HT213940

Check your stack JSON