CVE-2024-23277

published 2024-03-08

CVE-2024-23277: The issue was addressed with improved checks. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4. An attacker in a privileged network position…

medium 5.9 CVSS 3.1

AV N AC H PR N UI N S U C N I H A N

The issue was addressed with improved checks. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4. An attacker in a privileged network position may be able to inject keystrokes by spoofing a keyboard.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
apple	ios_17.4_and_ipados	—	—
apple	ios_and_ipados	< 17.4	17.4
apple	ipad_os	< 17.4	17.4
apple	iphone_os	>= 17.0 < 17.4	17.4
apple	macos	< 14.4	14.4
apple	macos	>= 14.0 < 14.4	14.4
apple	macos_sonoma	—	—