Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-23282


The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.5, watchOS 10.5, iOS 17.5 and iPadOS 17.5, iOS 16.7.8 and iPadOS 16.7.8. A maliciously crafted email may be able to initiate FaceTime calls without user authorization.


Published

2024-06-10T21:15:49.503

Last Modified

2024-11-21T08:57:23.883

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.5 (MEDIUM)

Weaknesses
  • Type: Primary
    NVD-CWE-noinfo
  • Type: Secondary
    CWE-552

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System apple ipados < 16.7.8 Yes
Operating System apple ipados < 17.5 Yes
Operating System apple iphone_os < 16.7.8 Yes
Operating System apple iphone_os < 17.5 Yes
Operating System apple macos < 14.5 Yes
Operating System apple watchos < 10.5 Yes

References