{"id":"CVE-2023-40394","published":"2024-01-10T22:03:53Z","modified":"2025-06-20T15:39:33Z","title":"The issue was addressed with improved validation of environment variables","vendor":"Apple","product":"iOS and iPadOS","tier":"tail","description":{"text":"The issue was addressed with improved validation of environment variables. This issue is fixed in iOS 16.6 and iPadOS 16.6. An app may be able to access sensitive user data.","provenance":"source","from":"CVE.org"},"cvss":{"score":3.3,"severity":"LOW","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","provenance":"source","from":"CISA ADP Vulnrichment"},"epss":{"score":0.00202,"percentile":0.10177,"provenance":"source"},"cwes":[{"id":"CWE-20","name":"Improper Input Validation"}],"references":[{"url":"https://support.apple.com/en-us/HT213841","tags":[]}],"priority":{"score":4.3,"factors":[{"name":"EPSS percentile","points":2.04},{"name":"CVSS severity","points":2.31}]},"vendorSlug":"apple","affectedVersions":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[">= unspecified, < 16.6"]}],"euvd":{"id":"EUVD-2023-44965","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-class-apple-ios-macos-cwe-20"}}