Security Resilience

CVE-2024-23220

Apple Ipad Os ≤ 17.4

Published
08 March 2024
Modified
17 June 2026
Patch / advisory
View advisory
CVSS Score v3.1 5.5
Click a component to see what it means
Raw vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
EPSS Score 0.0024 13th percentile
Risk Priority 42 floored blend · peak EPSS

CVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.

Summary

CVE-2024-23220 is a medium-severity an unspecified weakness vulnerability in Apple Ipad Os. Its CVSS base score is 5.5 (Medium).

Operationally, ranked at the 13th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability Data

The issue was addressed with improved handling of caches. This issue is fixed in iOS 17.4 and iPadOS 17.4, visionOS 1.1. An app may be able to fingerprint the user.

CWE(s)
NVD-CWE-noinfo

Related Threats

CVEs Like This One

CVE-2023-42855Same product: Apple Ipad Os
CVE-2024-23243Same product: Apple Ipad Os
CVE-2024-23256Same product: Apple Ipad Os
CVE-2024-23240Same product: Apple Ipad Os
CVE-2023-42939Same product: Apple Ipad Os
CVE-2024-44139Same product: Apple Ipad Os
CVE-2023-42951Same product: Apple Ipad Os
CVE-2023-42928Same product: Apple Ipad Os
CVE-2024-23242Same product: Apple Ipad Os
CVE-2025-24095Same product: Apple Iphone Os

Affected Assets

apple
ipad os
≤ 17.4
apple
iphone os
≤ 17.4
apple
visionos
≤ 1.1

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References