Lucene search
HistoryMay 14, 2024 - 3:13 p.m.
CVE-2024-27839
privacy
ios
ipados
sensitive data
location
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
AI Score
5.5
Confidence
Low
EPSS
0
Percentile
15.5%
A privacy issue was addressed by moving sensitive data to a more secure location. This issue is fixed in iOS 17.5 and iPadOS 17.5. A malicious application may be able to determine a user’s current location.
Related
cvelist
cvelist
CVE-2024-27839
2024-05-13 23:00:50
vulnrichment
vulnrichment
CVE-2024-27839
2024-05-13 23:00:50
cve
cve
CVE-2024-27839
2024-05-14 15:13:07
apple
apple
About the security content of iOS 17.5 and iPadOS 17.5
2024-05-13 00:00:00
About the security content of iOS 17.5 and iPadOS 17.5
2024-05-13 00:00:00
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
AI Score
5.5
Confidence
Low
EPSS
0
Percentile
15.5%
Related for NVD:CVE-2024-27839