CVE-2024-23203
Last modified
CVE-2024-23203 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. The issue was addressed with additional permissions checks. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, macOS Ventura 13.6.5. EPSS estimates a 0.92% chance of exploitation in the next 30 days.
Description
The issue was addressed with additional permissions checks. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, macOS Ventura 13.6.5. A shortcut may be able to use sensitive data with certain actions without prompting the user.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Apple | Ipados | > 17.0, < 17.3 |
| Apple | Iphone Os | > 17.0, < 17.3 |
| Apple | Macos | < 14.3 |
References
- http://seclists.org/fulldisclosure/2024/Jan/33Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Jan/36Third Party Advisory
- https://support.apple.com/en-us/HT214059Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214061Release Notes, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2024-23203?
How severe is CVE-2024-23203?
How do I fix CVE-2024-23203?
Are you affected by CVE-2024-23203?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST