CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

CVE-2024-23220: The issue was addressed with improved handling of caches. This issue is fixed in visionOS 1.1, iOS 17.4 and iPadOS 17.4. An app may be able to...

Description

The issue was addressed with improved handling of caches. This issue is fixed in visionOS 1.1, iOS 17.4 and iPadOS 17.4. An app may be able to fingerprint the user.

Classification

CVE ID: CVE-2024-23220

Affected Products

Vendor: Apple

Product: visionOS

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.05% (probability of being exploited)

EPSS Percentile: 20.38% (scored less or equal to compared to others)

EPSS Date: 2025-03-14 (when was this score calculated)

References

https://support.apple.com/en-us/HT214087
https://support.apple.com/en-us/HT214081
http://seclists.org/fulldisclosure/2024/Mar/26

Timeline