8.1

CVE-2024-23235

A race condition was addressed with additional validation. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, watchOS 10.4. An app may be able to access user-sensitive data.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apple ≫ iPadOS Version < 16.7.6
Apple ≫ iPadOS Version >= 17.0 < 17.4
Apple ≫ iPhone OS Version < 16.7.6
Apple ≫ iPhone OS Version >= 17.0 < 17.4
Apple ≫ macOS Version >= 14.0 < 14.4
Apple ≫ tvOS Version < 17.4
Apple ≫ visionOS Version < 1.1
Apple ≫ watchOS Version < 10.4
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.51% 0.391
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.7 1 3.6
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
134c704f-9b21-4f2e-91b3-4a467353bcc0 8.1 2.2 5.9
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

http://seclists.org/fulldisclosure/2024/Mar/21
Third Party Advisory
Mailing List
http://seclists.org/fulldisclosure/2024/Mar/24
Third Party Advisory
Mailing List
http://seclists.org/fulldisclosure/2024/Mar/25
Third Party Advisory
Mailing List
https://support.apple.com/kb/HT214084
https://support.apple.com/kb/HT214088
https://support.apple.com/kb/HT214082
http://seclists.org/fulldisclosure/2024/Mar/26
Third Party Advisory
Mailing List
https://support.apple.com/en-us/HT214081
Vendor Advisory
https://support.apple.com/en-us/HT214082
Vendor Advisory
https://support.apple.com/kb/HT214087
https://support.apple.com/en-us/HT214084
Vendor Advisory
https://support.apple.com/en-us/HT214086
Vendor Advisory
https://support.apple.com/en-us/HT214088
Vendor Advisory
https://support.apple.com/en-us/HT214087
Vendor Advisory
https://support.apple.com/en-us/120881
https://support.apple.com/en-us/120882
https://support.apple.com/en-us/120883
https://support.apple.com/en-us/120893
https://support.apple.com/en-us/120895
https://support.apple.com/en-us/120880