CVE-2024-23210

low-risk
Published 2024-01-23

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, tvOS 17.3, watchOS 10.3. An app may be able to view a user's phone number in system logs.

Do I need to act?

-
0.02% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
3
CVSS 3.3/10 Low
LOCAL / LOW complexity

Affected Products (5)

Affected Vendors

Apple

References (14)

https://support.apple.com/en-us/120304
https://support.apple.com/en-us/120306
https://support.apple.com/en-us/120309
https://support.apple.com/en-us/120311
Third Party Advisory http://seclists.org/fulldisclosure/2024/Jan/33
Third Party Advisory http://seclists.org/fulldisclosure/2024/Jan/36
Third Party Advisory http://seclists.org/fulldisclosure/2024/Jan/39
Third Party Advisory http://seclists.org/fulldisclosure/2024/Jan/40
Release Notes https://support.apple.com/en-us/HT214055
Release Notes https://support.apple.com/en-us/HT214059
Release Notes https://support.apple.com/en-us/HT214060
Release Notes https://support.apple.com/en-us/HT214061
https://support.apple.com/kb/HT214055
https://support.apple.com/kb/HT214061
25
/ 100
low-risk
Severity 13/34 · Low
Exploitability 0/34 · Minimal
Exposure 12/34 · Low