CVE-2024-27814

Published: Jun 10, 2024Modified: Jun 17, 2026

2.4

Vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 0.9 / Impact: 1.4

Source: NVD

Description

This issue was addressed through improved state management. This issue is fixed in watchOS 10.5. A person with physical access to a device may be able to view contact information from the lock screen.

Affected (1)

Products: Apple: Watchos

Apple

1 product

Watchos

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Apple Watchos	Before 10.5

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (3)

https://support.apple.com/en-us/120902

Source: product-security@apple.com

https://support.apple.com/en-us/HT214104

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://support.apple.com/kb/HT214104

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.