CVE-2023-40434: Apple iPadOS

Low severity, CVSS 3.3. EPSS: 0.3% chance of exploitation in the next 30 days.

A configuration issue was addressed with additional restrictions. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to access a user's Photos Library.

Affected products

• Apple iPadOS: before 17.0 (fixed in 17.0)
• Apple iPhone OS: before 17.0 (fixed in 17.0)
• Apple macOS: before 14.0 (fixed in 14.0)

Published 2023-09-27. Last modified 2026-06-17.