CVE-2024-23220

Medium

5.5/10

Summary

The issue was addressed with improved handling of caches. This issue is fixed in iOS 17.4 and iPadOS 17.4, visionOS 1.1. An app may be able to fingerprint the user.

Attack Complexity: LOW
Attack Vector: LOCAL
Integrity Impact: HIGH
Scope: UNCHANGED
User Interaction: REQUIRED
Privileges Required: NONE
Confidentiality Impact: NONE
Availability Impact: NONE

References

Advisory Timeline

Published Mar 08, 2024

CVE-2024-23220

Summary

References

Advisory Timeline

ChainJacking

JetBrains IDE

KICS SaaS