PT-2024-4839 · Apple · Ipados+4
Published
2024-05-13
·
Updated
2024-07-02
·
CVE-2024-27799
CVSS v3.1
3.3
Low
| Vector | AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions:
macOS versions prior to 14.5
macOS Ventura versions prior to 13.6.7
macOS Monterey versions prior to 12.7.5
iOS versions prior to 16.7.8
iPadOS versions prior to 16.7.8
Description:
The issue is related to insufficient protection of service data in the IOHIDFamily component, which may allow an attacker to disclose protected information. An unprivileged app may be able to log keystrokes in other apps, including those using secure input mode.
Recommendations:
For macOS versions prior to 14.5, update to macOS Sonoma 14.5.
For macOS Ventura versions prior to 13.6.7, update to macOS Ventura 13.6.7.
For macOS Monterey versions prior to 12.7.5, update to macOS Monterey 12.7.5.
For iOS versions prior to 16.7.8, update to iOS 16.7.8.
For iPadOS versions prior to 16.7.8, update to iPadOS 16.7.8.
Fix
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Apple Macos
Ios
Ipados
Macos Monterey
Macos Ventura