CVE-2024-23293
CVE-2024-23293
Vexday Risk Score
13Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS 4.6EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
08 mar 2024Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
This issue was addressed through improved state management. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS 10.4. An attacker with physical access may be able to use Siri to access sensitive user data.
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Referências
http://seclists.org/fulldisclosure/2024/Mar/21http://seclists.org/fulldisclosure/2024/Mar/24http://seclists.org/fulldisclosure/2024/Mar/25https://support.apple.com/en-us/120881https://support.apple.com/en-us/120882https://support.apple.com/en-us/120893https://support.apple.com/en-us/120895https://support.apple.com/en-us/HT214081https://support.apple.com/en-us/HT214084https://support.apple.com/en-us/HT214086https://support.apple.com/en-us/HT214088https://support.apple.com/kb/HT214081