CVE-2024-23203

Published: Jan 23, 2024Modified: Apr 2, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

The issue was addressed with additional permissions checks. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, macOS Ventura 13.6.5. A shortcut may be able to use sensitive data with certain actions without prompting the user.

Affected (3)

Products: Apple: Ipados, Iphone Os, Macos

3 products

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Apple Ipados	After 17.0 to 17.3
Apple Iphone Os	After 17.0 to 17.3
Apple Macos	Before 14.3

References (12)

https://support.apple.com/en-us/120304

Source: product-security@apple.com

https://support.apple.com/en-us/120309

Source: product-security@apple.com

https://support.apple.com/en-us/120880

Source: product-security@apple.com

https://support.apple.com/en-us/120886

Source: product-security@apple.com

http://seclists.org/fulldisclosure/2024/Jan/33

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://seclists.org/fulldisclosure/2024/Jan/36

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://seclists.org/fulldisclosure/2024/Mar/22

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.apple.com/en-us/HT214059

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesVendor Advisory

https://support.apple.com/en-us/HT214061

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesVendor Advisory

https://support.apple.com/kb/HT214061

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.apple.com/kb/HT214082

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.apple.com/kb/HT214085

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.