CVE-2024-23217

A

privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Sonoma 14.3, watchOS 10.3, iOS 17.3 and iPadOS 17.3. An app may be able to bypass certain Privacy preferences.

Configurations

Configuration 1 (hide)

OR cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

History

04 Nov 2025, 19:16

Type Values Removed Values Added
References
  • () https://support.apple.com/kb/HT214059 -
  • () https://support.apple.com/kb/HT214061 -

15 May 2025, 15:16

Type Values Removed Values Added
CWE CWE-922

21 Nov 2024, 08:57

Type Values Removed Values Added
References () http://seclists.org/fulldisclosure/2024/Jan/33 - Third Party Advisory () http://seclists.org/fulldisclosure/2024/Jan/33 - Third Party Advisory
References () http://seclists.org/fulldisclosure/2024/Jan/36 - Third Party Advisory () http://seclists.org/fulldisclosure/2024/Jan/36 - Third Party Advisory
References () http://seclists.org/fulldisclosure/2024/Jan/39 - Third Party Advisory () http://seclists.org/fulldisclosure/2024/Jan/39 - Third Party Advisory
References () http://seclists.org/fulldisclosure/2024/Mar/22 - () http://seclists.org/fulldisclosure/2024/Mar/22 -
References () https://support.apple.com/en-us/HT214059 - Release Notes, Vendor Advisory () https://support.apple.com/en-us/HT214059 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/HT214060 - Release Notes, Vendor Advisory () https://support.apple.com/en-us/HT214060 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/HT214061 - Release Notes, Vendor Advisory () https://support.apple.com/en-us/HT214061 - Release Notes, Vendor Advisory
References () https://support.apple.com/kb/HT214085 - () https://support.apple.com/kb/HT214085 -

Information

Published : 2024-01-23 01:15

Updated : 2025-11-04 19:16


NVD link : CVE-2024-23217

Mitre link : CVE-2024-23217

CVE.ORG link : CVE-2024-23217


JSON object : View

Products Affected
CWE
NVD-CWE-noinfo CWE-922

Insecure Storage of Sensitive Information