CVE-2024-23246

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14.4, visionOS 1.1, iOS 17.4 and iPadOS 17.4, watchOS 10.4, iOS 16.7.6 and iPadOS 16.7.6, tvOS 17.4. An app may be able to break out of its sandbox.

CVSS v3 8.1 HIGH

8.1^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
http://seclists.org/fulldisclosure/2024/Mar/21
http://seclists.org/fulldisclosure/2024/Mar/24
http://seclists.org/fulldisclosure/2024/Mar/25
http://seclists.org/fulldisclosure/2024/Mar/26
https://support.apple.com/en-us/HT214081
https://support.apple.com/en-us/HT214082
https://support.apple.com/en-us/HT214084
https://support.apple.com/en-us/HT214086
https://support.apple.com/en-us/HT214087
https://support.apple.com/en-us/HT214088

Configurations

No configuration.

History

No history.

Information

Published : 2024-03-08 02:15

Updated : 2024-07-03 01:47

NVD link : CVE-2024-23246

Mitre link : CVE-2024-23246

CVE.ORG link : CVE-2024-23246

JSON object : View

Products Affected

No product.

CWE

CWE-20

Improper Input Validation

{"id": "CVE-2024-23246", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 2.8}]}, "published": "2024-03-08T02:15:48.337", "references": [{"url": "http://seclists.org/fulldisclosure/2024/Mar/21", "source": "product-security@apple.com"}, {"url": "http://seclists.org/fulldisclosure/2024/Mar/24", "source": "product-security@apple.com"}, {"url": "http://seclists.org/fulldisclosure/2024/Mar/25", "source": "product-security@apple.com"}, {"url": "http://seclists.org/fulldisclosure/2024/Mar/26", "source": "product-security@apple.com"}, {"url": "https://support.apple.com/en-us/HT214081", "source": "product-security@apple.com"}, {"url": "https://support.apple.com/en-us/HT214082", "source": "product-security@apple.com"}, {"url": "https://support.apple.com/en-us/HT214084", "source": "product-security@apple.com"}, {"url": "https://support.apple.com/en-us/HT214086", "source": "product-security@apple.com"}, {"url": "https://support.apple.com/en-us/HT214087", "source": "product-security@apple.com"}, {"url": "https://support.apple.com/en-us/HT214088", "source": "product-security@apple.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14.4, visionOS 1.1, iOS 17.4 and iPadOS 17.4, watchOS 10.4, iOS 16.7.6 and iPadOS 16.7.6, tvOS 17.4. An app may be able to break out of its sandbox."}, {"lang": "es", "value": "Este problema se solucion\u00f3 eliminando el c\u00f3digo vulnerable. Este problema se solucion\u00f3 en macOS Sonoma 14.4, visionOS 1.1, iOS 17.4 y iPadOS 17.4, watchOS 10.4, iOS 16.7.6 y iPadOS 16.7.6, tvOS 17.4. Es posible que una aplicaci\u00f3n pueda salir de su zona de pruebas."}], "lastModified": "2024-07-03T01:47:40.097", "sourceIdentifier": "product-security@apple.com"}