CVE-2024-23206

Published Jan 23, 2024

Last updated 5 months ago

Overview

Description: An access issue was addressed with improved access restrictions. This issue is fixed in watchOS 10.3, tvOS 17.3, iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, iOS 16.7.5 and iPadOS 16.7.5, Safari 17.3. A maliciously crafted webpage may be able to fingerprint the user.
Source: product-security@apple.com
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 3.1

Type: Primary
Base score: 6.5
Impact score: 3.6
Exploitability score: 2.8
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Severity: MEDIUM

Weaknesses

nvd@nist.gov: NVD-CWE-noinfo

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "3D6F41D4-58ED-4E0B-90B4-3EDDB7CEA240",
            "versionEndExcluding": "17.3"
          },
          {
            "criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8C2307FA-1412-4727-AD29-541A337A9B97",
            "versionEndExcluding": "16.7.5",
            "versionStartExcluding": "16.0"
          },
          {
            "criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "EF93182E-EFE2-4DAF-BAA2-5053A20ADCFF",
            "versionEndExcluding": "17.3",
            "versionStartExcluding": "17.0"
          },
          {
            "criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "78404384-8393-4F57-8076-C84BCFD58B1D",
            "versionEndExcluding": "16.7.5",
            "versionStartExcluding": "16.0"
          },
          {
            "criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "79493683-AFEA-42B7-9F15-C3E47069C9CF",
            "versionEndExcluding": "17.3",
            "versionStartExcluding": "17.0"
          },
          {
            "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "3A4823C4-3812-46DB-8295-D021C93236CC",
            "versionEndExcluding": "14.3"
          },
          {
            "criteria": "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "921307BF-8419-42C7-9B2C-8DD643723E38",
            "versionEndExcluding": "17.3"
          },
          {
            "criteria": "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F265723B-24BD-4BD9-A45C-6FFD000A7B03",
            "versionEndExcluding": "10.3"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 3.1

Weaknesses

Configurations

References