Lucene search
HistorySep 17, 2024 - 12:15 a.m.
CVE-2024-40852
restricting options
locked device
ios 18
ipados 18
cve-2024-40852
assistive access
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0
Percentile
9.6%
This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 18 and iPadOS 18. An attacker may be able to see recent photos without authentication in Assistive Access.
References
Related
cvelist
cvelist
CVE-2024-40852
2024-09-16 23:23:22
vulnrichment
vulnrichment
CVE-2024-40852
2024-09-16 23:23:22
cve
cve
CVE-2024-40852
2024-09-17 00:15:49
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0
Percentile
9.6%
Related for NVD:CVE-2024-40852