Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-23203

The issue was addressed with additional permissions checks. This issue is fixed in macOS Sonoma 14.3, iOS 17.3 and iPadOS 17.3. A shortcut may be able to use sensitive data with certain actions without prompting the user.

Published

2024-01-23T01:15:10.740

Last Modified

2025-05-30T15:15:34.220

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

Weaknesses

Type: Primary
NVD-CWE-noinfo

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	apple	ipados	< 17.3	Yes
Operating System	apple	iphone_os	< 17.3	Yes
Operating System	apple	macos	< 14.3	Yes

References

http://seclists.org/fulldisclosure/2024/Jan/33 Third Party Advisory ([email protected])
http://seclists.org/fulldisclosure/2024/Jan/36 Third Party Advisory ([email protected])
http://seclists.org/fulldisclosure/2024/Mar/22 ([email protected])
https://support.apple.com/en-us/HT214059 Release Notes, Vendor Advisory ([email protected])
https://support.apple.com/en-us/HT214061 Release Notes, Vendor Advisory ([email protected])
https://support.apple.com/kb/HT214082 ([email protected])
https://support.apple.com/kb/HT214085 ([email protected])
http://seclists.org/fulldisclosure/2024/Jan/33 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://seclists.org/fulldisclosure/2024/Jan/36 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://seclists.org/fulldisclosure/2024/Mar/22 (af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/en-us/HT214059 Release Notes, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/en-us/HT214061 Release Notes, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/kb/HT214082 (af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/kb/HT214085 (af854a3a-2127-422b-91ae-364da2661108)