{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-23211", "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c", "state": "PUBLISHED", "assignerShortName": "apple", "dateReserved": "2024-01-12T22:22:21.476Z", "datePublished": "2024-01-23T00:25:20.675Z", "dateUpdated": "2025-06-20T19:12:28.382Z"}, "containers": {"cna": {"problemTypes": [{"descriptions": [{"lang": "en", "description": "A user's private browsing activity may be visible in Settings"}]}], "affected": [{"vendor": "Apple", "product": "iOS and iPadOS", "versions": [{"version": "unspecified", "status": "affected", "lessThan": "17.3", "versionType": "custom"}]}, {"vendor": "Apple", "product": "iOS and iPadOS", "versions": [{"version": "unspecified", "status": "affected", "lessThan": "16.7", "versionType": "custom"}]}, {"vendor": "Apple", "product": "Safari", "versions": [{"version": "unspecified", "status": "affected", "lessThan": "17.3", "versionType": "custom"}]}, {"vendor": "Apple", "product": "watchOS", "versions": [{"version": "unspecified", "status": "affected", "lessThan": "10.3", "versionType": "custom"}]}, {"vendor": "Apple", "product": "macOS", "versions": [{"version": "unspecified", "status": "affected", "lessThan": "14.3", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "value": "A privacy issue was addressed with improved handling of user preferences. This issue is fixed in watchOS 10.3, iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, iOS 16.7.5 and iPadOS 16.7.5, Safari 17.3. A user's private browsing activity may be visible in Settings."}], "references": [{"url": "https://support.apple.com/en-us/HT214059"}, {"url": "https://support.apple.com/en-us/HT214063"}, {"url": "https://support.apple.com/en-us/HT214056"}, {"url": "https://support.apple.com/en-us/HT214060"}, {"url": "https://support.apple.com/en-us/HT214061"}, {"url": "http://seclists.org/fulldisclosure/2024/Jan/27"}, {"url": "http://seclists.org/fulldisclosure/2024/Jan/33"}, {"url": "http://seclists.org/fulldisclosure/2024/Jan/36"}, {"url": "http://seclists.org/fulldisclosure/2024/Jan/34"}, {"url": "http://seclists.org/fulldisclosure/2024/Jan/39"}], "providerMetadata": {"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c", "shortName": "apple", "dateUpdated": "2024-01-26T16:06:24.471Z"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T22:59:32.037Z"}, "title": "CVE Program Container", "references": [{"url": "https://support.apple.com/en-us/HT214059", "tags": ["x_transferred"]}, {"url": "https://support.apple.com/en-us/HT214063", "tags": ["x_transferred"]}, {"url": "https://support.apple.com/en-us/HT214056", "tags": ["x_transferred"]}, {"url": "https://support.apple.com/en-us/HT214060", "tags": ["x_transferred"]}, {"url": "https://support.apple.com/en-us/HT214061", "tags": ["x_transferred"]}, {"url": "http://seclists.org/fulldisclosure/2024/Jan/27", "tags": ["x_transferred"]}, {"url": "http://seclists.org/fulldisclosure/2024/Jan/33", "tags": ["x_transferred"]}, {"url": "http://seclists.org/fulldisclosure/2024/Jan/36", "tags": ["x_transferred"]}, {"url": "http://seclists.org/fulldisclosure/2024/Jan/34", "tags": ["x_transferred"]}, {"url": "http://seclists.org/fulldisclosure/2024/Jan/39", "tags": ["x_transferred"]}]}, {"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-359", "lang": "en", "description": "CWE-359 Exposure of Private Personal Information to an Unauthorized Actor"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.3, "attackVector": "LOCAL", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2024-01-23T13:23:02.240179Z", "id": "CVE-2024-23211", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-06-20T19:12:28.382Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://support.apple.com/en-us/HT214059", "tags": ["x_transferred"]}, {"url": "https://support.apple.com/en-us/HT214063", "tags": ["x_transferred"]}, {"url": "https://support.apple.com/en-us/HT214056", "tags": ["x_transferred"]}, {"url": "https://support.apple.com/en-us/HT214060", "tags": ["x_transferred"]}, {"url": "https://support.apple.com/en-us/HT214061", "tags": ["x_transferred"]}, {"url": "http://seclists.org/fulldisclosure/2024/Jan/27", "tags": ["x_transferred"]}, {"url": "http://seclists.org/fulldisclosure/2024/Jan/33", "tags": ["x_transferred"]}, {"url": "http://seclists.org/fulldisclosure/2024/Jan/36", "tags": ["x_transferred"]}, {"url": "http://seclists.org/fulldisclosure/2024/Jan/34", "tags": ["x_transferred"]}, {"url": "http://seclists.org/fulldisclosure/2024/Jan/39", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T22:59:32.037Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.3, "attackVector": "LOCAL", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2024-23211", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-01-23T13:23:02.240179Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-359", "description": "CWE-359 Exposure of Private Personal Information to an Unauthorized Actor"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-06-20T19:12:09.548Z"}}], "cna": {"affected": [{"vendor": "Apple", "product": "iOS and iPadOS", "versions": [{"status": "affected", "version": "unspecified", "lessThan": "17.3", "versionType": "custom"}]}, {"vendor": "Apple", "product": "iOS and iPadOS", "versions": [{"status": "affected", "version": "unspecified", "lessThan": "16.7", "versionType": "custom"}]}, {"vendor": "Apple", "product": "Safari", "versions": [{"status": "affected", "version": "unspecified", "lessThan": "17.3", "versionType": "custom"}]}, {"vendor": "Apple", "product": "watchOS", "versions": [{"status": "affected", "version": "unspecified", "lessThan": "10.3", "versionType": "custom"}]}, {"vendor": "Apple", "product": "macOS", "versions": [{"status": "affected", "version": "unspecified", "lessThan": "14.3", "versionType": "custom"}]}], "references": [{"url": "https://support.apple.com/en-us/HT214059"}, {"url": "https://support.apple.com/en-us/HT214063"}, {"url": "https://support.apple.com/en-us/HT214056"}, {"url": "https://support.apple.com/en-us/HT214060"}, {"url": "https://support.apple.com/en-us/HT214061"}, {"url": "http://seclists.org/fulldisclosure/2024/Jan/27"}, {"url": "http://seclists.org/fulldisclosure/2024/Jan/33"}, {"url": "http://seclists.org/fulldisclosure/2024/Jan/36"}, {"url": "http://seclists.org/fulldisclosure/2024/Jan/34"}, {"url": "http://seclists.org/fulldisclosure/2024/Jan/39"}], "descriptions": [{"lang": "en", "value": "A privacy issue was addressed with improved handling of user preferences. This issue is fixed in watchOS 10.3, iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, iOS 16.7.5 and iPadOS 16.7.5, Safari 17.3. A user's private browsing activity may be visible in Settings."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "A user's private browsing activity may be visible in Settings"}]}], "providerMetadata": {"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c", "shortName": "apple", "dateUpdated": "2024-01-26T16:06:24.471Z"}}}, "cveMetadata": {"cveId": "CVE-2024-23211", "state": "PUBLISHED", "dateUpdated": "2025-06-20T19:12:28.382Z", "dateReserved": "2024-01-12T22:22:21.476Z", "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c", "datePublished": "2024-01-23T00:25:20.675Z", "assignerShortName": "apple"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*", "matchCriteriaId": "3D6F41D4-58ED-4E0B-90B4-3EDDB7CEA240", "versionEndExcluding": "17.3", "vulnerable": true}, {"criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*", "matchCriteriaId": "8C2307FA-1412-4727-AD29-541A337A9B97", "versionEndExcluding": "16.7.5", "versionStartExcluding": "16.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*", "matchCriteriaId": "EF93182E-EFE2-4DAF-BAA2-5053A20ADCFF", "versionEndExcluding": "17.3", "versionStartExcluding": "17.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*", "matchCriteriaId": "78404384-8393-4F57-8076-C84BCFD58B1D", "versionEndExcluding": "16.7.5", "versionStartExcluding": "16.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*", "matchCriteriaId": "79493683-AFEA-42B7-9F15-C3E47069C9CF", "versionEndExcluding": "17.3", "versionStartExcluding": "17.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*", "matchCriteriaId": "79ADFEBE-99EE-4F01-9AE8-489EB41885D1", "versionEndExcluding": "14.3", "versionStartIncluding": "14.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*", "matchCriteriaId": "F265723B-24BD-4BD9-A45C-6FFD000A7B03", "versionEndExcluding": "10.3", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A privacy issue was addressed with improved handling of user preferences. This issue is fixed in watchOS 10.3, iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, iOS 16.7.5 and iPadOS 16.7.5, Safari 17.3. A user's private browsing activity may be visible in Settings."}, {"lang": "es", "value": "Se solucion\u00f3 un problema de privacidad mejorando el manejo de las preferencias del usuario. Este problema se solucion\u00f3 en watchOS 10.3, iOS 17.3 y iPadOS 17.3, macOS Sonoma 14.3, iOS 16.7.5 y iPadOS 16.7.5, Safari 17.3. La actividad de navegaci\u00f3n privada de un usuario puede ser visible en Configuraci\u00f3n."}], "id": "CVE-2024-23211", "lastModified": "2025-06-20T20:15:31.170", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 3.3, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 1.4, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 3.3, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 1.4, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2024-01-23T01:15:11.087", "references": [{"source": "product-security@apple.com", "tags": ["Third Party Advisory"], "url": "http://seclists.org/fulldisclosure/2024/Jan/27"}, {"source": "product-security@apple.com", "tags": ["Third Party Advisory"], "url": "http://seclists.org/fulldisclosure/2024/Jan/33"}, {"source": "product-security@apple.com", "tags": ["Third Party Advisory"], "url": "http://seclists.org/fulldisclosure/2024/Jan/34"}, {"source": "product-security@apple.com", "tags": ["Third Party Advisory"], "url": "http://seclists.org/fulldisclosure/2024/Jan/36"}, {"source": "product-security@apple.com", "tags": ["Third Party Advisory"], "url": "http://seclists.org/fulldisclosure/2024/Jan/39"}, {"source": "product-security@apple.com", "tags": ["Release Notes", "Vendor Advisory"], "url": "https://support.apple.com/en-us/HT214056"}, {"source": "product-security@apple.com", "tags": ["Release Notes", "Vendor Advisory"], "url": "https://support.apple.com/en-us/HT214059"}, {"source": "product-security@apple.com", "tags": ["Release Notes", "Vendor Advisory"], "url": "https://support.apple.com/en-us/HT214060"}, {"source": "product-security@apple.com", "tags": ["Release Notes", "Vendor Advisory"], "url": "https://support.apple.com/en-us/HT214061"}, {"source": "product-security@apple.com", "tags": ["Release Notes", "Vendor Advisory"], "url": "https://support.apple.com/en-us/HT214063"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://seclists.org/fulldisclosure/2024/Jan/27"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://seclists.org/fulldisclosure/2024/Jan/33"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://seclists.org/fulldisclosure/2024/Jan/34"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://seclists.org/fulldisclosure/2024/Jan/36"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://seclists.org/fulldisclosure/2024/Jan/39"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Release Notes", "Vendor Advisory"], "url": "https://support.apple.com/en-us/HT214056"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Release Notes", "Vendor Advisory"], "url": "https://support.apple.com/en-us/HT214059"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Release Notes", "Vendor Advisory"], "url": "https://support.apple.com/en-us/HT214060"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Release Notes", "Vendor Advisory"], "url": "https://support.apple.com/en-us/HT214061"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Release Notes", "Vendor Advisory"], "url": "https://support.apple.com/en-us/HT214063"}], "sourceIdentifier": "product-security@apple.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-359"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{}