CVE-2024-23297
MEDIUMiPadOS < 17.4 - Unauthorized Private Information Access
Title source: llmDescription
The issue was addressed with improved checks. This issue is fixed in iOS 17.4 and iPadOS 17.4, tvOS 17.4, watchOS 10.4. A malicious application may be able to access private information.
References (11)
Core 11
Core References
Mailing List
http://seclists.org/fulldisclosure/2024/Mar/24
Mailing List
http://seclists.org/fulldisclosure/2024/Mar/25
Vendor Advisory
https://support.apple.com/en-us/HT214081
Vendor Advisory
https://support.apple.com/en-us/HT214086
Vendor Advisory
https://support.apple.com/en-us/HT214088
Vendor Advisory
https://support.apple.com/kb/HT214081
Vendor Advisory
https://support.apple.com/kb/HT214086
Vendor Advisory
https://support.apple.com/kb/HT214088
Scores
CVSS v3
5.5
EPSS
0.0006
EPSS Percentile
19.6%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
Status
published
Products (7)
Apple/iOS and iPadOS
< 17.4
apple/ipad_os
< 17.4
apple/iphone_os
< 17.4
apple/tvos
< 17.4
Apple/tvOS
< 17.4
apple/watchos
< 10.4
Apple/watchOS
< 10.4
Published
Mar 08, 2024
Tracked Since
Feb 18, 2026