WID-SEC-W-2024-0553

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Apple iOS: Mehrere Schwachstellen

view advisory published 2024-03-05

Ein anonymer Angreifer kann mehrere Schwachstellen in Apple iOS ausnutzen, um Sicherheitsmaßnahmen zu umgehen oder vertrauliche Informationen offenzulegen.

01

describes (4)

Related CVEs.

IDseverity exploitable
CVE-2024-23296UShigh7.8OT criticalKEV
A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.6, macOS Sonoma…
CVE-2024-23256USlow3.3—
A logic issue was addressed with improved state management. This issue is fixed in iOS 17.4 and iPadOS 17.4. A user's locked tabs may be briefly visible while switching tab groups…
CVE-2024-23243USlow3.3—
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 17.4 and iPadOS 17.4. An app may be able to read sensitive location i…
CVE-2024-23225UShigh7.8OT criticalKEV
A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.4, macOS Sonoma…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan