Description
This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, watchOS 10.6. An attacker with physical access to a device may be able to access contacts from the lock screen.
Metrics
CVSS 3.1 2.4/10
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Apple | iOS and iPadOS | < 16.7.9; < 17.6 |
| Apple | macOS | < 14.6 |
| Apple | watchOS | < 10.6 |
References
- https://support.apple.com/en-us/120908
- https://support.apple.com/en-us/120909
- https://support.apple.com/en-us/120911
- https://support.apple.com/en-us/120916
- http://seclists.org/fulldisclosure/2024/Jul/16Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Jul/17Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Jul/18Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Jul/21Mailing List, Third Party Advisory
- https://support.apple.com/en-us/HT214116Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214117Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214119Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214124Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT214116
- https://support.apple.com/kb/HT214117
- https://support.apple.com/kb/HT214119
- https://support.apple.com/kb/HT214124
Timeline
- Published
- Jul 29, 2024
- Last modified
- Jun 17, 2026
- NVD status
- Modified