CVE-2024-23231

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Mar 8, 2024
Updated: Dec 20, 2024

Summary

CVE-2024-23231 is a privacy vulnerability affecting multiple Apple operating systems and devices, including macOS Ventura 13.6.5, macOS Sonoma 14.4, iOS 17.4, iPadOS 17.4, watchOS 10.4, iOS 16.7.6, and iPadOS 16.7.6. The issue stemmed from inadequate private data redaction in log entries, allowing certain apps to potentially access user-sensitive data. This vulnerability has since been addressed with the release of the respective software updates.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • iOS
  • iPadOS
  • Apple Watch
  • Apple (iPhone OS)
  • MacOS

Affected Vendors

  • Apple