CVE-2024-23256 — Apple IOS AND Ipados vulnerability

4 documents4 sources
Severity
3.3LOWNVD
EPSS
0.1%
top 70.56%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Apple IOS AND IpadosApple Ipad OSApple Iphone OS
Timeline
PublishedMar 5

Description

A logic issue was addressed with improved state management. This issue is fixed in iOS 17.4 and iPadOS 17.4. A user's locked tabs may be briefly visible while switching tab groups when Locked Private Browsing is enabled.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:NExploitability: 1.8 | Impact: 1.4

Affected Packages3 packages

▶NVDapple/ipad_os< 17.4
▶CVEListV5apple/ios_and_ipados< 17.4
▶NVDapple/iphone_os< 17.4

🔴Vulnerability Details

2
GHSA
GHSA-9475-r4q8-rfwm: A logic issue was addressed with improved state management↗2024-03-05
▶
CVEList
CVE-2024-23256: A logic issue was addressed with improved state management↗2024-03-05
▶

📋Vendor Advisories

1
Apple
CVE-2024-23256: iOS 17.4 and iPadOS 17.4↗2024-03-05
▶
CVE-2024-23256 — Apple IOS AND Ipados vulnerability | cvebase