This issue was addressed with improved data protection. This issue is fixed in macOS Sonoma 14.4, iOS 17.4 and iPadOS 17.4. An app may be able to access information about a user's contacts.
CVE ID: CVE-2024-23292
Vendor: Apple
Product: iOS and iPadOS
EPSS Score: 0.05% (probability of being exploited)
EPSS Percentile: 20.11% (scored less or equal to compared to others)
EPSS Date: 2025-03-14 (when was this score calculated)