CVE-2024-23207mediumCWE-200

CVE-2024-23207

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.5epss 0.3%

exploitation probability

0.3%top 75% of all CVEs

observed exploitation

nono source reports it

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 17.3 and iPadOS 17.3, macOS Monterey 12.7.3, macOS Sonoma 14.3, macOS Ventura 13.6.4, watchOS 10.3. An app may be able to access sensitive user data.

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Affected products

Apple · iOS and iPadOS Apple · macOS Apple · watchOS

References

http://seclists.org/fulldisclosure/2024/Jan/33 http://seclists.org/fulldisclosure/2024/Jan/36 http://seclists.org/fulldisclosure/2024/Jan/37 http://seclists.org/fulldisclosure/2024/Jan/38 http://seclists.org/fulldisclosure/2024/Jan/39 https://support.apple.com/en-us/120304 https://support.apple.com/en-us/120305 https://support.apple.com/en-us/120306 https://support.apple.com/en-us/120307 https://support.apple.com/en-us/120309 https://support.apple.com/en-us/HT214057 https://support.apple.com/en-us/HT214058