medium5.9
CVE-2024-23277
The issue was addressed with improved checks.
Impact
The issue was addressed with improved checks. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4. An attacker in a privileged network position may be able to inject keystrokes by spoofing a keyboard.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Ipad Os | after 17.0 before 17.4 |
| Apple | Iphone Os | from 17.0 before 17.4 |
| Apple | Macos | from 14.0 before 14.4 |
References
- NVD record
- CVE.org record
- https://support.apple.com/en-us/120893
- https://support.apple.com/en-us/120895
- http://seclists.org/fulldisclosure/2024/Mar/21
- https://support.apple.com/en-us/HT214081
- https://support.apple.com/en-us/HT214084
- https://support.apple.com/kb/HT214081
- https://support.apple.com/kb/HT214084