CVE-2024-23262mediumCWE-863

CVE-2024-23262: falha de média gravidade em Apple visionOS

Publicada em 08 mar 2024 · Atualizada em 02 abr 2026

Seguir esta CVE + Monitorar iOS + Monitorar iPadOS

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4.3epss 0.5%

This issue was addressed with additional entitlement checks. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, visionOS 1.1. An app may be able to spoof system notifications and UI.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Produtos afetados

Apple · iOS and iPadOS Apple · visionOS

CVEs relacionadas — Apple visionOS

No mesmo produto, das mais perigosas para as menos.

CVE-2025-43300CRITICALCVE-2025-43300EPSS 65.2%KEV CVE-2023-32434HIGHCVE-2023-32434EPSS 58.2%KEV CVE-2023-41064HIGHCVE-2023-41064EPSS 53.4%KEV CVE-2023-28205HIGHCVE-2023-28205EPSS 27.1%KEV CVE-2026-86950HIGHCVE-2026-86950EPSS 26.2%KEV CVE-2025-43529HIGHCVE-2025-43529EPSS 25.7%KEV

Referências

http://seclists.org/fulldisclosure/2024/Mar/26 https://support.apple.com/en-us/120880 https://support.apple.com/en-us/120883 https://support.apple.com/en-us/120893 https://support.apple.com/en-us/HT214081 https://support.apple.com/en-us/HT214082 https://support.apple.com/en-us/HT214087 https://support.apple.com/kb/HT214081 https://support.apple.com/kb/HT214082 https://support.apple.com/kb/HT214087