CVE-2024-27835

LOW | Platform: iOS | Changelog

CVE Details

Description

This issue was addressed through improved state management. This issue is fixed in iOS 17.5 and iPadOS 17.5. An attacker with physical access to an iOS device may be able to access notes from the lock screen.

CVSS 3.1 Score

Metric	Value
Base Score	2.4 (LOW)
Vector	`CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N`

Weakness

CWE-287

References

Apple Security Advisory
NVD Entry
http://seclists.org/fulldisclosure/2024/May/10 (Mailing List)
https://support.apple.com/en-us/HT214101 (Vendor Advisory)
https://support.apple.com/kb/HT214101 (Vendor Advisory)