CVE-2024-23228

EPSS 0.13%
Veröffentlicht 24.04.2024 17:15:47
Zuletzt bearbeitet 04.11.2025 19:16:37
Quelle product-security@apple.com
CVE-Watchlists
Login
Unerledigt
Login

This issue was addressed through improved state management. This issue is fixed in iOS 17.3 and iPadOS 17.3. Locked Notes content may have been unexpectedly unlocked.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Apple ≫ iPadOS Version < 17.3

Apple ≫ iPhone OS Version < 17.3

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.13%	0.334

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	3.3	1.8	1.4	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
134c704f-9b21-4f2e-91b3-4a467353bcc0	4.3	2.8	1.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

https://support.apple.com/en-us/HT214059

Vendor Advisory

https://support.apple.com/kb/HT214059

https://nvd.nist.gov/vuln/detail/CVE-2024-23228

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-23228

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-23228

EUVD