CVE-2024-23273

Published: Mar 8, 2024Modified: Jun 17, 2026

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

This issue was addressed through improved state management. This issue is fixed in Safari 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4. Private Browsing tabs may be accessed without authentication.

Affected (4)

Products: Apple: Ipad Os, Iphone Os, Macos, Safari

4 products

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Apple Ipad Os	Before 17.4
Apple Iphone Os	Before 17.4
Apple Macos	From 14.0 to 14.4
Apple Safari	Before 17.4

Related CWEs

CWE-295

Improper Certificate Validation

The product does not validate, or incorrectly validates, a certificate.

References (11)

https://support.apple.com/en-us/120893

Source: product-security@apple.com

https://support.apple.com/en-us/120894

Source: product-security@apple.com

https://support.apple.com/en-us/120895

Source: product-security@apple.com

http://seclists.org/fulldisclosure/2024/Mar/20