CVEvulnerability
CVE-2024-27835
2.4 LOW
Official page ↗
- Status
- Modified
- Published
- 2024-05-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 2.4 LOW — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 2.4 LOW — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- Weaknesses
- CWE-287
Description
This issue was addressed through improved state management. This issue is fixed in iOS 17.5 and iPadOS 17.5. An attacker with physical access to an iOS device may be able to access notes from the lock screen.
Affected configurations
• apple ipados (< 17.5)
• apple iphone os (< 17.5)
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- https://support.apple.com/en-us/120905 support.apple.com
- http://seclists.org/fulldisclosure/2024/May/10 Mailing List
- https://support.apple.com/en-us/HT214101 Vendor Advisory
- https://support.apple.com/kb/HT214101 Vendor Advisory