Skip to main content

Ipad Os CVE-2024-23256

LOW
2024-03-05 product-security@apple.com
Apple Information Disclosure Ipad Os Iphone Os
3.3
CVSS 3.1 · NVD

Severity by source

NVD PRIMARY
3.3 LOW
AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
None

Lifecycle Timeline

1
CVE Published
Mar 05, 2024 - 20:16 nvd
LOW 3.3

DescriptionCVE.org

A logic issue was addressed with improved state management. This issue is fixed in iOS 17.4 and iPadOS 17.4. A user's locked tabs may be briefly visible while switching tab groups when Locked Private Browsing is enabled.

AnalysisAI

A logic issue was addressed with improved state management. Rated low severity (CVSS 3.3), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

A logic issue was addressed with improved state management. This issue is fixed in iOS 17.4 and iPadOS 17.4. A user's locked tabs may be briefly visible while switching tab groups when Locked Private Browsing is enabled. Affected products include: Apple Ipad Os, Apple Iphone Os.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Ipad Os

View all
CVE-2021-1818 CRITICAL
9.8 Apr 02

A logic issue was addressed with improved state management. Rated critical severity (CVSS 9.8), this vulnerability is re
CVE-2021-1796 CRITICAL
9.8 Apr 02

An out-of-bounds write was addressed with improved input validation. Rated critical severity (CVSS 9.8), this vulnerabil
CVE-2021-1795 CRITICAL
9.8 Apr 02

An out-of-bounds write was addressed with improved input validation. Rated critical severity (CVSS 9.8), this vulnerabil
CVE-2021-1794 CRITICAL
9.8 Apr 02

An out-of-bounds read was addressed with improved input validation. Rated critical severity (CVSS 9.8), this vulnerabili
CVE-2024-23226 HIGH
8.8 Mar 08

The issue was addressed with improved memory handling. Rated high severity (CVSS 8.8), this vulnerability is remotely ex
CVE-2022-22637 HIGH
8.8 Sep 23

A logic issue was addressed with improved state management. Rated high severity (CVSS 8.8), this vulnerability is remote
CVE-2022-22628 HIGH
8.8 Sep 23

A use after free issue was addressed with improved memory management. Rated high severity (CVSS 8.8), this vulnerability
CVE-2022-22624 HIGH
8.8 Sep 23

A use after free issue was addressed with improved memory management. Rated high severity (CVSS 8.8), this vulnerability
CVE-2022-22610 HIGH
8.8 Sep 23

A memory corruption issue was addressed with improved state management. Rated high severity (CVSS 8.8), this vulnerabili
CVE-2020-3901 HIGH
8.8 Apr 01

A type confusion issue was addressed with improved memory handling. Rated high severity (CVSS 8.8), this vulnerability i
CVE-2020-3900 HIGH
8.8 Apr 01

A memory corruption issue was addressed with improved memory handling. Rated high severity (CVSS 8.8), this vulnerabilit
CVE-2020-3899 HIGH
8.8 Apr 01

A memory consumption issue was addressed with improved memory handling. Rated high severity (CVSS 8.8), this vulnerabili

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2024-23256 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy