CVE-2024-23289

3.3 lowEPSS 0.3%

Low (3.3) in apple. EPSS 0.3% chance of exploitation in the next 30 days.

A lock screen issue was addressed with improved state management. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, watchOS 10.4. A person with physical access to a device may be able to use Siri to access private calendar information.

Severity

CVSS 3.1

3.3 low

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 21% of CVEs (scores of 2026-10-31)
Published: 2024-03-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

apple:ipados
apple:iphone_os
apple:macos
apple:watchos

References

https://support.apple.com/en-us/120880
https://support.apple.com/en-us/120881
https://support.apple.com/en-us/120893
https://support.apple.com/en-us/120895
http://seclists.org/fulldisclosure/2024/Mar/21

Check your stack JSON