CVE-2024-23297

Published: Mar 8, 2024Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

The issue was addressed with improved checks. This issue is fixed in iOS 17.4 and iPadOS 17.4, tvOS 17.4, watchOS 10.4. A malicious application may be able to access private information.

Affected (4)

Products: Apple: Ipad Os, Iphone Os, Tvos, Watchos

4 products

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Apple Ipad Os	Before 17.4
Apple Iphone Os	Before 17.4
Apple Tvos	Before 17.4
Apple Watchos	Before 10.4

References (11)

https://support.apple.com/en-us/120881

Source: product-security@apple.com

https://support.apple.com/en-us/120882

Source: product-security@apple.com

https://support.apple.com/en-us/120893

Source: product-security@apple.com

http://seclists.org/fulldisclosure/2024/Mar/24