Skip to main content

Ipad Os CVE-2024-23250

MEDIUM
Incorrect Authorization (CWE-863)
2024-03-08 product-security@apple.com
Apple Authentication Bypass Ipad Os Iphone Os macOS Tvos Watchos
5.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.5 MEDIUM
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
None
Integrity
High
Availability
None

Lifecycle Timeline

1
CVE Published
Mar 08, 2024 - 02:15 nvd
MEDIUM 5.5

DescriptionCVE.org

An access issue was addressed with improved access restrictions. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS 10.4. An app may be able to access Bluetooth-connected microphones without user permission.

AnalysisAI

An access issue was addressed with improved access restrictions. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Incorrect Authorization (CWE-863), which allows attackers to bypass authorization checks to access restricted resources. An access issue was addressed with improved access restrictions. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS 10.4. An app may be able to access Bluetooth-connected microphones without user permission. Affected products include: Apple Ipad Os, Apple Iphone Os, Apple Macos, Apple Tvos, Apple Watchos.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Review and test authorization logic, implement consistent access control checks, use centralized authorization framework.

More in Ipad Os

View all
CVE-2021-1818 CRITICAL
9.8 Apr 02

A logic issue was addressed with improved state management. Rated critical severity (CVSS 9.8), this vulnerability is re
CVE-2021-1796 CRITICAL
9.8 Apr 02

An out-of-bounds write was addressed with improved input validation. Rated critical severity (CVSS 9.8), this vulnerabil
CVE-2021-1795 CRITICAL
9.8 Apr 02

An out-of-bounds write was addressed with improved input validation. Rated critical severity (CVSS 9.8), this vulnerabil
CVE-2021-1794 CRITICAL
9.8 Apr 02

An out-of-bounds read was addressed with improved input validation. Rated critical severity (CVSS 9.8), this vulnerabili
CVE-2024-23226 HIGH
8.8 Mar 08

The issue was addressed with improved memory handling. Rated high severity (CVSS 8.8), this vulnerability is remotely ex
CVE-2022-22637 HIGH
8.8 Sep 23

A logic issue was addressed with improved state management. Rated high severity (CVSS 8.8), this vulnerability is remote
CVE-2022-22628 HIGH
8.8 Sep 23

A use after free issue was addressed with improved memory management. Rated high severity (CVSS 8.8), this vulnerability
CVE-2022-22624 HIGH
8.8 Sep 23

A use after free issue was addressed with improved memory management. Rated high severity (CVSS 8.8), this vulnerability
CVE-2022-22610 HIGH
8.8 Sep 23

A memory corruption issue was addressed with improved state management. Rated high severity (CVSS 8.8), this vulnerabili
CVE-2020-3901 HIGH
8.8 Apr 01

A type confusion issue was addressed with improved memory handling. Rated high severity (CVSS 8.8), this vulnerability i
CVE-2020-3900 HIGH
8.8 Apr 01

A memory corruption issue was addressed with improved memory handling. Rated high severity (CVSS 8.8), this vulnerabilit
CVE-2020-3899 HIGH
8.8 Apr 01

A memory consumption issue was addressed with improved memory handling. Rated high severity (CVSS 8.8), this vulnerabili

Same weakness CWE-863 – Incorrect Authorization

View all
CVE-2025-54253 CRITICAL POC
10.0
CVE-2025-24200 MEDIUM
6.1
CVE-2025-21480 HIGH
8.6
CVE-2025-21479 HIGH
8.6
CVE-2017-4915 HIGH POC
7.8
CVE-2024-6782 CRITICAL POC
9.8
CVE-2024-38856 CRITICAL POC
9.8
CVE-2023-22518 CRITICAL POC
9.8

Same technique Authentication Bypass

View all
CVE-2023-22515 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2013-2465 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2012-1723 CRITICAL POC
9.8
CVE-2017-10271 HIGH POC
7.5
CVE-2015-1427 CRITICAL POC
9.8
CVE-2025-3248 CRITICAL POC
9.8

Share

CVE-2024-23250 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy