CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!
CVE-2024-23291: A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in tvOS 17.4, iOS 17.4 and iPadOS 17.4,...
Description
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in tvOS 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, watchOS 10.4. A malicious app may be able to observe user data in log entries related to accessibility notifications.
Classification
CVE ID: CVE-2024-23291
Affected Products
Vendor: Apple
Product: tvOS
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.05% (probability of being exploited)
EPSS Percentile: 23.83% (scored less or equal to compared to others)
EPSS Date: 2025-03-14 (when was this score calculated)
References
https://support.apple.com/en-us/HT214086https://support.apple.com/en-us/HT214081
https://support.apple.com/en-us/HT214084
https://support.apple.com/en-us/HT214088
http://seclists.org/fulldisclosure/2024/Mar/21
http://seclists.org/fulldisclosure/2024/Mar/25
http://seclists.org/fulldisclosure/2024/Mar/24