← back
CVE-2024-23220

CVE-2024-23220

CVSS 4 MEDIUMEPSS 0.2%
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 4EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
08 Mar 2024Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
The issue was addressed with improved handling of caches. This issue is fixed in iOS 17.4 and iPadOS 17.4, visionOS 1.1. An app may be able to fingerprint the user.
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Affected products
Apple · iOS and iPadOSApple · visionOS
References
http://seclists.org/fulldisclosure/2024/Mar/26https://support.apple.com/en-us/120883https://support.apple.com/en-us/120893https://support.apple.com/en-us/HT214081https://support.apple.com/en-us/HT214087https://support.apple.com/kb/HT214081https://support.apple.com/kb/HT214087