CVEvulnerability
CVE-2024-40813
4.6 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2024-07-29
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.6 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 4.6 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-922
Description
A lock screen issue was addressed with improved state management. This issue is fixed in iOS 17.6 and iPadOS 17.6, watchOS 10.6. An attacker with physical access may be able to use Siri to access sensitive user data.
Affected configurations
• apple ipados (< 17.6)
• apple iphone os (< 17.6)
• apple watchos (< 10.6)
Related
Weakness · CWE (1)
- CWE-922 Insecure Storage of Sensitive Information weakness
References
- https://support.apple.com/en-us/120909 support.apple.com
- https://support.apple.com/en-us/120916 support.apple.com
- http://seclists.org/fulldisclosure/2024/Jul/16 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Jul/21 Mailing List, Third Party Advisory
- https://support.apple.com/en-us/HT214117 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214124 Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT214117 support.apple.com
- https://support.apple.com/kb/HT214124 support.apple.com