Description
A logic issue was addressed with improved checks. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, watchOS 10.5. An attacker may be able to access user data.
Metrics
CVSS 3.1 5.5/10
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:NAffected software
| Vendor | Product | Versions |
|---|---|---|
| Apple | iOS and iPadOS | < 17.5 |
| Apple | macOS | < 14.5 |
| Apple | tvOS | < 17.5 |
| Apple | watchOS | < 10.5 |
References
- https://support.apple.com/en-us/120901
- https://support.apple.com/en-us/120902
- https://support.apple.com/en-us/120903
- https://support.apple.com/en-us/120905
- http://seclists.org/fulldisclosure/2024/May/10Mailing List
- http://seclists.org/fulldisclosure/2024/May/12Mailing List
- http://seclists.org/fulldisclosure/2024/May/16Mailing List
- http://seclists.org/fulldisclosure/2024/May/17Mailing List
- https://support.apple.com/en-us/HT214101Vendor Advisory
- https://support.apple.com/en-us/HT214102Vendor Advisory
- https://support.apple.com/en-us/HT214104Vendor Advisory
- https://support.apple.com/en-us/HT214106Vendor Advisory
- https://support.apple.com/kb/HT214101Vendor Advisory
- https://support.apple.com/kb/HT214102Vendor Advisory
- https://support.apple.com/kb/HT214104Vendor Advisory
- https://support.apple.com/kb/HT214106Vendor Advisory
Timeline
- Published
- May 14, 2024
- Last modified
- Jun 17, 2026
- NVD status
- Modified