CVEvulnerability
CVE-2024-27803
2.4 LOW
Official page ↗
- Status
- Modified
- Published
- 2024-05-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 2.4 LOW — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 2.4 LOW — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- Weaknesses
- CWE-284
Description
A permissions issue was addressed with improved validation. This issue is fixed in iOS 17.5 and iPadOS 17.5. An attacker with physical access may be able to share items from the lock screen.
Affected configurations
• apple ipados (< 17.5)
• apple iphone os (< 17.5)
Related
Weakness · CWE (1)
- CWE-284 Improper Access Control weakness
References
- https://support.apple.com/en-us/120905 support.apple.com
- http://seclists.org/fulldisclosure/2024/May/10 Mailing List
- https://support.apple.com/en-us/HT214101 Vendor Advisory
- https://support.apple.com/kb/HT214101 Vendor Advisory