← voltar
CVE-2024-23262

CVE-2024-23262

CVSS 4.3 MEDIUMEPSS 0.5%CWE-863
Vexday Risk Score
13Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS 4.3EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
08 mar 2024Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
This issue was addressed with additional entitlement checks. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, visionOS 1.1. An app may be able to spoof system notifications and UI.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Produtos afetados
Apple · iOS and iPadOSApple · visionOS

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
http://seclists.org/fulldisclosure/2024/Mar/26https://support.apple.com/en-us/120880https://support.apple.com/en-us/120883https://support.apple.com/en-us/120893https://support.apple.com/en-us/HT214081https://support.apple.com/en-us/HT214082https://support.apple.com/en-us/HT214087https://support.apple.com/kb/HT214081https://support.apple.com/kb/HT214082https://support.apple.com/kb/HT214087