Apple Ios 17.4 And Ipados vulnerabilities

41 known vulnerabilities affecting apple/ios_17.4_and_ipados.

Total CVEs
41
CISA KEV
2
actively exploited
Public exploits
0
Exploited in wild
2
Severity breakdown
HIGH11MEDIUM21LOW9

Vulnerabilities

Page 2 of 3
CVE-2024-23235MEDIUMCVSS 4.7v17.42024-03-05
CVE-2024-23235 [MEDIUM] CVE-2024-23235: iOS 17.4 and iPadOS 17.4 Apple Security Update: About the security content of iOS 17.4 and iPadOS 17.4 Product: iOS 17.4 and iPadOS Version: 17.4 CVE: CVE-2024-23235 Component: CVE-2024-23235
apple
CVE-2024-23284MEDIUMCVSS 6.5v17.42024-03-05
CVE-2024-23284 [MEDIUM] CVE-2024-23284: iOS 17.4 and iPadOS 17.4 Apple Security Update: About the security content of iOS 17.4 and iPadOS 17.4 Product: iOS 17.4 and iPadOS Version: 17.4 CVE: CVE-2024-23284 Component: WebKit Impact: Processing maliciously crafted web content may prevent Content Security Policy from being enforced Description: A logic issue was addressed with improved state management.
apple
CVE-2024-23297MEDIUMCVSS 5.5v17.42024-03-05
CVE-2024-23297 [MEDIUM] CVE-2024-23297: iOS 17.4 and iPadOS 17.4 Apple Security Update: About the security content of iOS 17.4 and iPadOS 17.4 Product: iOS 17.4 and iPadOS Version: 17.4 CVE: CVE-2024-23297 Component: MediaRemote Impact: A malicious application may be able to access private information Description: The issue was addressed with improved checks.
apple
CVE-2024-54658MEDIUMCVSS 6.5v17.42024-03-05
CVE-2024-54658 [MEDIUM] CVE-2024-54658: iOS 17.4 and iPadOS 17.4 Apple Security Update: About the security content of iOS 17.4 and iPadOS 17.4 Product: iOS 17.4 and iPadOS Version: 17.4 CVE: CVE-2024-54658 Component: WebKit Impact: Processing web content may lead to a denial-of-service Description: The issue was addressed with improved memory handling.
apple
CVE-2024-23241MEDIUMCVSS 5.5v17.42024-03-05
CVE-2024-23241 [MEDIUM] CVE-2024-23241: iOS 17.4 and iPadOS 17.4 Apple Security Update: About the security content of iOS 17.4 and iPadOS 17.4 Product: iOS 17.4 and iPadOS Version: 17.4 CVE: CVE-2024-23241 Component: CVE-2024-23241
apple
CVE-2024-23280MEDIUMCVSS 6.5v17.42024-03-05
CVE-2024-23280 [MEDIUM] CVE-2024-23280: iOS 17.4 and iPadOS 17.4 Apple Security Update: About the security content of iOS 17.4 and iPadOS 17.4 Product: iOS 17.4 and iPadOS Version: 17.4 CVE: CVE-2024-23280 Component: WebKit Impact: A maliciously crafted webpage may be able to fingerprint the user Description: An injection issue was addressed with improved validation.
apple
CVE-2024-23231MEDIUMCVSS 5.5v17.42024-03-05
CVE-2024-23231 [MEDIUM] CVE-2024-23231: iOS 17.4 and iPadOS 17.4 Apple Security Update: About the security content of iOS 17.4 and iPadOS 17.4 Product: iOS 17.4 and iPadOS Version: 17.4 CVE: CVE-2024-23231 Component: Share Sheet Impact: An app may be able to access user-sensitive data Description: A privacy issue was addressed with improved private data redaction for log entries.
apple
CVE-2024-23287MEDIUMCVSS 5.5v17.42024-03-05
CVE-2024-23287 [MEDIUM] CVE-2024-23287: iOS 17.4 and iPadOS 17.4 Apple Security Update: About the security content of iOS 17.4 and iPadOS 17.4 Product: iOS 17.4 and iPadOS Version: 17.4 CVE: CVE-2024-23287 Component: Messages Impact: An app may be able to access user-sensitive data Description: A privacy issue was addressed with improved handling of temporary files.
apple
CVE-2024-23220MEDIUMCVSS 5.5v17.42024-03-05
CVE-2024-23220 [MEDIUM] CVE-2024-23220: iOS 17.4 and iPadOS 17.4 Apple Security Update: About the security content of iOS 17.4 and iPadOS 17.4 Product: iOS 17.4 and iPadOS Version: 17.4 CVE: CVE-2024-23220 Component: CVE-2024-23220
apple
CVE-2024-23250MEDIUMCVSS 5.5v17.42024-03-05
CVE-2024-23250 [MEDIUM] CVE-2024-23250: iOS 17.4 and iPadOS 17.4 Apple Security Update: About the security content of iOS 17.4 and iPadOS 17.4 Product: iOS 17.4 and iPadOS Version: 17.4 CVE: CVE-2024-23250 Component: CoreBluetooth - LE Impact: An app may be able to access Bluetooth-connected microphones without user permission Description: An access issue was addressed with improved access restrictions.
apple
CVE-2024-23290MEDIUMCVSS 5.5v17.42024-03-05
CVE-2024-23290 [MEDIUM] CVE-2024-23290: iOS 17.4 and iPadOS 17.4 Apple Security Update: About the security content of iOS 17.4 and iPadOS 17.4 Product: iOS 17.4 and iPadOS Version: 17.4 CVE: CVE-2024-23290 Component: Sandbox Impact: An app may be able to access user-sensitive data Description: A logic issue was addressed with improved restrictions.
apple
CVE-2024-23259MEDIUMCVSS 6.5v17.42024-03-05
CVE-2024-23259 [MEDIUM] CVE-2024-23259: iOS 17.4 and iPadOS 17.4 Apple Security Update: About the security content of iOS 17.4 and iPadOS 17.4 Product: iOS 17.4 and iPadOS Version: 17.4 CVE: CVE-2024-23259 Component: Safari Impact: Processing web content may lead to a denial-of-service Description: The issue was addressed with improved checks.
apple
CVE-2024-23243LOWCVSS 3.3v17.42024-03-05
CVE-2024-23243 [LOW] CVE-2024-23243: iOS 17.4 and iPadOS 17.4 Apple Security Update: About the security content of iOS 17.4 and iPadOS 17.4 Product: iOS 17.4 and iPadOS Version: 17.4 CVE: CVE-2024-23243 Component: Accessibility Impact: An app may be able to read sensitive location information Description: A privacy issue was addressed with improved private data redaction for log entries.
apple
CVE-2024-23255LOWCVSS 2.4v17.42024-03-05
CVE-2024-23255 [LOW] CVE-2024-23255: iOS 17.4 and iPadOS 17.4 Apple Security Update: About the security content of iOS 17.4 and iPadOS 17.4 Product: iOS 17.4 and iPadOS Version: 17.4 CVE: CVE-2024-23255 Component: Photos Impact: Photos in the Hidden Photos Album may be viewed without authentication Description: An authentication issue was addressed with improved state management.
apple
CVE-2024-23256LOWCVSS 3.3v17.42024-03-05
CVE-2024-23256 [LOW] CVE-2024-23256: iOS 17.4 and iPadOS 17.4 Apple Security Update: About the security content of iOS 17.4 and iPadOS 17.4 Product: iOS 17.4 and iPadOS Version: 17.4 CVE: CVE-2024-23256 Component: Safari Private Browsing Impact: A user's locked tabs may be briefly visible while switching tab groups when Locked Private Browsing is enabled Description: A logic issue was addressed with improved state management.
apple
CVE-2024-23291LOWCVSS 3.3v17.42024-03-05
CVE-2024-23291 [LOW] CVE-2024-23291: iOS 17.4 and iPadOS 17.4 Apple Security Update: About the security content of iOS 17.4 and iPadOS 17.4 Product: iOS 17.4 and iPadOS Version: 17.4 CVE: CVE-2024-23291 Component: CVE-2024-23291
apple
CVE-2024-23262LOWCVSS 3.3v17.42024-03-05
CVE-2024-23262 [LOW] CVE-2024-23262: iOS 17.4 and iPadOS 17.4 Apple Security Update: About the security content of iOS 17.4 and iPadOS 17.4 Product: iOS 17.4 and iPadOS Version: 17.4 CVE: CVE-2024-23262 Component: Accessibility Impact: An app may be able to spoof system notifications and UI Description: This issue was addressed with additional entitlement checks.
apple
CVE-2024-23240LOWCVSS 2.4v17.42024-03-05
CVE-2024-23240 [LOW] CVE-2024-23240: iOS 17.4 and iPadOS 17.4 Apple Security Update: About the security content of iOS 17.4 and iPadOS 17.4 Product: iOS 17.4 and iPadOS Version: 17.4 CVE: CVE-2024-23240 Component: Photos Impact: Shake-to-undo may allow a deleted photo to be re-surfaced without authentication Description: The issue was addressed with improved checks.
apple
CVE-2024-23289LOWCVSS 3.3v17.42024-03-05
CVE-2024-23289 [LOW] CVE-2024-23289: iOS 17.4 and iPadOS 17.4 Apple Security Update: About the security content of iOS 17.4 and iPadOS 17.4 Product: iOS 17.4 and iPadOS Version: 17.4 CVE: CVE-2024-23289 Component: Siri Impact: A person with physical access to a device may be able to use Siri to access private calendar information Description: A lock screen issue was addressed with improved state management.
apple
CVE-2024-23292LOWCVSS 3.3v17.42024-03-05
CVE-2024-23292 [LOW] CVE-2024-23292: iOS 17.4 and iPadOS 17.4 Apple Security Update: About the security content of iOS 17.4 and iPadOS 17.4 Product: iOS 17.4 and iPadOS Version: 17.4 CVE: CVE-2024-23292 Component: Shortcuts Impact: An app may be able to access information about a user's contacts Description: This issue was addressed with improved data protection.
apple