CVE-2023-24890: medium-severity vulnerability in Microsoft OneDrive for iOS
Microsoft OneDrive for iOS Security Feature Bypass Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
Microsoft OneDrive for iOS contains a security feature bypass vulnerability that allows attackers to circumvent protective measures. This flaw could enable unauthorized access to protected content on affected devices.
The vulnerability permits bypassing security features in OneDrive for iOS through CWE-1390 (Improper Restriction of Rendered UI Layers or Frames). An attacker with local access or ability to interact with the device UI can circumvent authentication or authorization mechanisms, potentially accessing sensitive data stored or synchronized through the application.