CVEvulnerability
CVE-2024-23287
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2024-03-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-377
Description
A privacy issue was addressed with improved handling of temporary files. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, watchOS 10.4. An app may be able to access user-sensitive data.
Affected configurations
• apple ipados (< 17.4)
• apple iphone os (< 17.4)
• apple macos (>= 14.0 < 14.4)
• apple watchos (< 10.4)
Related
Weakness · not in database (1)
References
- https://support.apple.com/en-us/120881 support.apple.com
- https://support.apple.com/en-us/120893 support.apple.com
- https://support.apple.com/en-us/120895 support.apple.com
- http://seclists.org/fulldisclosure/2024/Mar/21 Mailing List
- http://seclists.org/fulldisclosure/2024/Mar/24 Mailing List
- https://support.apple.com/en-us/HT214081 Vendor Advisory
- https://support.apple.com/en-us/HT214084 Vendor Advisory
- https://support.apple.com/en-us/HT214088 Vendor Advisory
- https://support.apple.com/kb/HT214081 support.apple.com
- https://support.apple.com/kb/HT214084 support.apple.com
- https://support.apple.com/kb/HT214088 support.apple.com