VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Jan 10, 2024· Updated Jun 17, 2026

CVE-2023-40385

CVE-2023-40385

Description

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14, Safari 17, iOS 17 and iPadOS 17. A remote attacker may be able to view leaked DNS queries with Private Relay turned on.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

11
  • Apple Inc./Safariv53 versions
    unspecified+ 2 more
    • (no CPE)range: unspecified
    • (no CPE)range: 17
    • cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*range: <17.0
  • Apple Inc./macOSv53 versions
    unspecified+ 2 more
    • (no CPE)range: unspecified
    • (no CPE)range: Sonoma 14
    • cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*range: <14.0
  • Apple Inc./iOS and iPadOScpe-rescue
    Range: unspecified
  • Apple Inc./iOSllm-fuzzy
    Range: 17
  • Apple Inc./Ipadosllm-fuzzy2 versions
    17+ 1 more
    • (no CPE)range: 17
    • cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*range: <17.0
  • Apple Inc./Iphone OS
    cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
    Range: <17.0

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.