CVE-2024-23241

MEDIUM

iPadOS < 17.4 - Sensitive User Information Leak via Insecure Storage

Title source: llm
STIX 2.1

Description

This issue was addressed through improved state management. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4. An app may be able to leak sensitive user information.

References (11)

Core 11

Scores

CVSS v3 5.5
EPSS 0.0044
EPSS Percentile 34.9%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-922
Status published
Products (7)
Apple/iOS and iPadOS < 17.4
apple/ipad_os < 17.4
apple/iphone_os < 17.4
Apple/macOS < 14.4
apple/macos 14.0 - 14.4
apple/tvos < 17.4
Apple/tvOS < 17.4
Published Mar 08, 2024
Tracked Since Feb 18, 2026