CVE-2024-23289

A lock screen issue was addressed with improved state management. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, watchOS 10.4. A person with physical access to a device may be able to use Siri to access private calendar information.

• https://support.apple.com/en-us/120880
• https://support.apple.com/en-us/120881
• https://support.apple.com/en-us/120893
• https://support.apple.com/en-us/120895
• http://seclists.org/fulldisclosure/2024/Mar/21Mailing List
• http://seclists.org/fulldisclosure/2024/Mar/24Mailing List
• https://support.apple.com/en-us/HT214081Vendor Advisory
• https://support.apple.com/en-us/HT214082Vendor Advisory
• https://support.apple.com/en-us/HT214084Vendor Advisory
• https://support.apple.com/en-us/HT214088Vendor Advisory
• https://support.apple.com/kb/HT214081
• https://support.apple.com/kb/HT214082
• https://support.apple.com/kb/HT214084
• https://support.apple.com/kb/HT214088

Published

Mar 8, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-23283A privacy issue was addressed with improved private data red…5.5
• CVE-2024-23284A logic issue was addressed with improved state management. …6.5
• CVE-2024-23285This issue was addressed with improved handling of symlinks.…5.5
• CVE-2024-23286A buffer overflow issue was addressed with improved memory h…7.8
• CVE-2024-23287A privacy issue was addressed with improved handling of temp…5.5
• CVE-2024-23288This issue was addressed by removing the vulnerable code. Th…7.8
• CVE-2024-2329A vulnerability was found in Netentsec NS-ASG Application Se…9.8
• CVE-2024-23290A logic issue was addressed with improved restrictions. This…5.5
• CVE-2024-23291A privacy issue was addressed with improved private data red…3.3
• CVE-2024-23292This issue was addressed with improved data protection. This…3.3
• CVE-2024-23293This issue was addressed through improved state management. …4.6
• CVE-2024-23294This issue was addressed by removing the vulnerable code. Th…7.8