Permissions, Privileges, and Access Controls in Apple iOS and iPadOS - CVE-2024-23228
Published: April 29, 2024
Vulnerability identifier: #VU89035
CSH Severity: Low
CVSS v4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2024-23228
CWE-ID: CWE-264
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vendor: Apple Inc.
Affected software:
Apple iOS
iPadOS
Apple iOS
iPadOS
Detailed vulnerability description
The vulnerability allows a local application to gain access to sensitive information.
The vulnerability exists due to application does not properly impose security restrictions, which can cause locked Notes content to be unexpectedly unlocked.
How to mitigate CVE-2024-23228
Install updates from vendor's website.