CVE-2024-23203

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
23/01/2024
Last modified:
30/05/2025

Description

The issue was addressed with additional permissions checks. This issue is fixed in macOS Sonoma 14.3, iOS 17.3 and iPadOS 17.3. A shortcut may be able to use sensitive data with certain actions without prompting the user.

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* 17.0 (excluding) 17.3 (excluding)
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* 17.0 (excluding) 17.3 (excluding)
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* 14.3 (excluding)