[CVE-2023-38596] The issue with ATS in Apple’s macOS and iOS

CVE

CVE-2023-38596

Published

2023-10-30 12:00

Collected

2026-07-03 03:55

---
id: 1609
title: "[CVE-2023-38596] The issue with ATS in Apple’s macOS and iOS"
cve: CVE-2023-38596
source_domain: blog.trailofbits.com
source_url: "https://blog.trailofbits.com/2023/10/30/the-issue-with-ats-in-apples-macos-and-ios/"
published_at: "2023-10-30T12:00:57Z"
tags: ["macos", "ios", "apple", "tls", "vulnerability-disclosure", "ats", "cve-2023-38596", "mitm"]
phying_url: "https://phying.com/item/1609"
lang: en
---

# [CVE-2023-38596] The issue with ATS in Apple’s macOS and iOS

## Summary

Trail of Bits discloses CVE-2023-38596: Apple's ATS fails to enforce encryption for IP-address and .local connections, exposing iOS and macOS apps to MitM attacks and data exposure.

## Intelligence Metadata

- **Sources:** blog.trailofbits.com
- **CVE:** CVE-2023-38596
- **Published:** 2023-10-30T12:00:57Z
- **Original:** https://blog.trailofbits.com/2023/10/30/the-issue-with-ats-in-apples-macos-and-ios/
- **Phying News:** https://phying.com/item/1609