← volver
CVE-2024-23235

CVE-2024-23235

CVSS 8.1 HIGHEPSS 0.5%CWE-200
Vexday Risk Score
21Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 8.1EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
08 mar 2024Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
A race condition was addressed with additional validation. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, watchOS 10.4. An app may be able to access user-sensitive data.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Productos afectados
Apple · iOS and iPadOSApple · macOSApple · tvOSApple · visionOSApple · watchOS
Referencias
http://seclists.org/fulldisclosure/2024/Mar/21http://seclists.org/fulldisclosure/2024/Mar/24http://seclists.org/fulldisclosure/2024/Mar/25http://seclists.org/fulldisclosure/2024/Mar/26https://support.apple.com/en-us/120880https://support.apple.com/en-us/120881https://support.apple.com/en-us/120882https://support.apple.com/en-us/120883https://support.apple.com/en-us/120893https://support.apple.com/en-us/120895https://support.apple.com/en-us/HT214081https://support.apple.com/en-us/HT214082