Permissions, Privileges, and Access Controls in iPadOS and Apple iOS - CVE-2024-23228
Published: April 29, 2024
Vulnerability identifier: #VU89035
CSH Severity: Low
CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2024-23228
CWE-ID: CWE-264
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local application to gain access to sensitive information.
The vulnerability exists due to application does not properly impose security restrictions, which can cause locked Notes content to be unexpectedly unlocked.
Affected software
iPadOS
Apple iOS
Apple iOS
How to mitigate CVE-2024-23228
Install updates from vendor's website.
iPadOS - update to 17.3 21D50
Apple iOS - update to 17.3 21D50
Apple iOS - update to 17.3 21D50