CVE-2024-23291

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS 10.4. A malicious app may be able to observe user data in log entries related to accessibility notifications.

• https://support.apple.com/en-us/120881
• https://support.apple.com/en-us/120882
• https://support.apple.com/en-us/120893
• https://support.apple.com/en-us/120895
• http://seclists.org/fulldisclosure/2024/Mar/21Mailing List
• http://seclists.org/fulldisclosure/2024/Mar/24Mailing List
• http://seclists.org/fulldisclosure/2024/Mar/25Mailing List
• https://support.apple.com/en-us/HT214081Vendor Advisory
• https://support.apple.com/en-us/HT214084Vendor Advisory
• https://support.apple.com/en-us/HT214086Vendor Advisory
• https://support.apple.com/en-us/HT214088Vendor Advisory
• https://support.apple.com/kb/HT214081
• https://support.apple.com/kb/HT214084
• https://support.apple.com/kb/HT214086
• https://support.apple.com/kb/HT214088

Published

Mar 8, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-23286A buffer overflow issue was addressed with improved memory h…7.8
• CVE-2024-23287A privacy issue was addressed with improved handling of temp…5.5
• CVE-2024-23288This issue was addressed by removing the vulnerable code. Th…7.8
• CVE-2024-23289A lock screen issue was addressed with improved state manage…3.3
• CVE-2024-2329A vulnerability was found in Netentsec NS-ASG Application Se…9.8
• CVE-2024-23290A logic issue was addressed with improved restrictions. This…5.5
• CVE-2024-23292This issue was addressed with improved data protection. This…3.3
• CVE-2024-23293This issue was addressed through improved state management. …4.6
• CVE-2024-23294This issue was addressed by removing the vulnerable code. Th…7.8
• CVE-2024-23295A permissions issue was addressed to help ensure Personas ar…5.5
• CVE-2024-23296A memory corruption issue was addressed with improved valida…7.8
• CVE-2024-23297The issue was addressed with improved checks. This issue is …5.5