CVEvulnerability
CVE-2024-23220
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2024-03-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 4.0 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Description
The issue was addressed with improved handling of caches. This issue is fixed in iOS 17.4 and iPadOS 17.4, visionOS 1.1. An app may be able to fingerprint the user.
Affected configurations
• apple ipad os (< 17.4)
• apple iphone os (< 17.4)
• apple visionos (< 1.1)
References
- https://support.apple.com/en-us/120883 support.apple.com
- https://support.apple.com/en-us/120893 support.apple.com
- http://seclists.org/fulldisclosure/2024/Mar/26 Mailing List
- https://support.apple.com/en-us/HT214081 Vendor Advisory
- https://support.apple.com/en-us/HT214087 Vendor Advisory
- https://support.apple.com/kb/HT214081 support.apple.com
- https://support.apple.com/kb/HT214087 support.apple.com