CVE-2023-40529

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 17 and iPadOS 17. A person with physical access to a device may be able to use VoiceOver to access private calendar information.

• https://support.apple.com/en-us/HT213938Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT213938Release Notes, Vendor Advisory
• https://support.apple.com/kb/HT213938

Published

Jan 10, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-40517LG SuperSign Media Editor ContentRestController getObject Di…7.5
• CVE-2023-40518LiteSpeed OpenLiteSpeed before 1.7.18 does not strictly vali…7.5
• CVE-2023-40519A cross-site scripting (XSS) vulnerability in the bpk-common…6.1
• CVE-2023-4052The Firefox updater created a directory writable by non-priv…6.5
• CVE-2023-40520The issue was addressed with improved checks. This issue is …3.3
• CVE-2023-40528This issue was addressed by removing the vulnerable code. Th…5.5
• CVE-2023-4053A website could have obscured the full screen notification b…6.5
• CVE-2023-40530Improper authorization in handler for custom URL scheme issu…4.7
• CVE-2023-40531Archer AX6000 firmware versions prior to 'Archer AX6000(JP)_…8
• CVE-2023-40532Path traversal vulnerability in Welcart e-Commerce versions …4.3
• CVE-2023-40533Rejected reason: This CVE ID is a duplicate of CVE-2022-4046…
• CVE-2023-40534When a client-side HTTP/2 profile and the HTTP MRF Router op…7.5