← back
CVE-2024-23293

CVE-2024-23293

CVSS 4.6 MEDIUMEPSS 0.4%
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 4.6EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
08 Mar 2024Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
This issue was addressed through improved state management. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS 10.4. An attacker with physical access may be able to use Siri to access sensitive user data.
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
Apple · iOS and iPadOSApple · macOSApple · tvOSApple · watchOS
References
http://seclists.org/fulldisclosure/2024/Mar/21http://seclists.org/fulldisclosure/2024/Mar/24http://seclists.org/fulldisclosure/2024/Mar/25https://support.apple.com/en-us/120881https://support.apple.com/en-us/120882https://support.apple.com/en-us/120893https://support.apple.com/en-us/120895https://support.apple.com/en-us/HT214081https://support.apple.com/en-us/HT214084https://support.apple.com/en-us/HT214086https://support.apple.com/en-us/HT214088https://support.apple.com/kb/HT214081