{"id":"CVE-2023-23523","aliases":["EUVD-2023-27623","GHSA-pm8c-p624-72x2"],"status":"published","title":"A logic issue was addressed with improved restrictions. This issue is fixed in macOS Ventura 13.3...","description":"A logic issue was addressed with improved restrictions. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4. Photos belonging to the Hidden Photos Album could be viewed without authentication through Visual Lookup.","severity":{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00232,"percentile":0.14148,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2023-05-08T00:00:00Z","modified":"2026-06-17T05:37:20Z","products":[{"vendor":"apple","product":"ios and ipados"},{"vendor":"apple","product":"ipados"},{"vendor":"apple","product":"iphone_os"},{"vendor":"apple","product":"macos"}],"references":[{"url":"https://support.apple.com/en-us/HT213670","tags":["x_transferred","Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/HT213676","tags":["x_transferred","Release Notes","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-23523"},{"url":"https://github.com/advisories/GHSA-pm8c-p624-72x2"}],"sources":{"cve":[{"id":"CVE-2023-23523","description":"A logic issue was addressed with improved restrictions. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4. Photos belonging to the Hidden Photos Album could be viewed without authentication through Visual Lookup.","status":"published","published":"2023-05-08T00:00:00Z","modified":"2025-01-29T16:04:53.413Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"low","assessor":"adp"}],"updated_at":"2026-11-02T14:35:21.232549Z"}],"euvd":[{"id":"EUVD-2023-27623","description":"A logic issue was addressed with improved restrictions. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4. Photos belonging to the Hidden Photos Album could be viewed without authentication through Visual Lookup.","status":"published","published":"2023-05-08T00:00:00Z","modified":"2025-01-29T16:04:53Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-03T00:04:09.89712Z"}],"ghsa":[{"id":"GHSA-pm8c-p624-72x2","title":"A logic issue was addressed with improved restrictions. This issue is fixed in macOS Ventura 13.3...","description":"A logic issue was addressed with improved restrictions. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4. Photos belonging to the Hidden Photos Album could be viewed without authentication through Visual Lookup","status":"published","published":"2023-05-08T21:31:06Z","modified":"2024-04-04T03:51:20Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T14:56:19.059216Z"}],"nvd":[{"id":"CVE-2023-23523","description":"A logic issue was addressed with improved restrictions. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4. Photos belonging to the Hidden Photos Album could be viewed without authentication through Visual Lookup.","status":"published","published":"2023-05-08T20:15:16.117Z","modified":"2026-06-17T05:37:20.13Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"low","assessor":"primary"},{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"low","assessor":"secondary"}],"updated_at":"2026-11-02T14:08:01.131774Z"}]}}