CVE-2024-23241

medium

Description

This issue was addressed through improved state management. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4. An app may be able to leak sensitive user information.

References

https://support.apple.com/kb/HT214086

https://support.apple.com/kb/HT214084

https://support.apple.com/kb/HT214081

https://support.apple.com/en-us/HT214086

https://support.apple.com/en-us/HT214084

https://support.apple.com/en-us/HT214081

https://support.apple.com/en-us/120895

https://support.apple.com/en-us/120893

https://support.apple.com/en-us/120882

http://seclists.org/fulldisclosure/2024/Mar/25

http://seclists.org/fulldisclosure/2024/Mar/21

Details

Source: Mitre, NVD

Published: 2024-03-08

Updated: 2026-04-02

Risk Information

CVSS v2

Base Score: 4.9

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 5.5

Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N