CVE-2024-23204

The issue was addressed with additional permissions checks

High · published January 23, 2024

CVSS v3.1
7.5
EPSS
2%
Percentile
78.2
In the wild
Unconfirmed
What it is

The issue was addressed with additional permissions checks. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.3 and iPadOS 17.3, macOS Monterey 12.7.4, macOS Sonoma 14.3, macOS Ventura 13.6.5, watchOS 10.3. A shortcut may be able to use sensitive data with certain actions without prompting the user.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01789 · 78.2th percentile
Published
2024-01-23T00:25Z
EPSS history
Timeline
  • 23 JAN 00:25Z
    The issue was addressed with additional permissions checks
    cvelistv5