CVE-2024-23282
EUVD-2024-2080110.06.2024, 21:15
The issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, watchOS 10.5. A maliciously crafted email may be able to initiate FaceTime calls without user authorization.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| apple | ipados | 𝑥 < 16.7.8 |
| apple | ipados | 17.0 ≤ 𝑥 < 17.5 |
| apple | iphone_os | 𝑥 < 16.7.8 |
| apple | iphone_os | 17.0 ≤ 𝑥 < 17.5 |
| apple | macos | 14.0 ≤ 𝑥 < 14.5 |
| apple | watchos | 𝑥 < 10.5 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| apple | ipados | 𝑥 < 16.7.8 | ADP |
| apple | ipados | 17.0 ≤ 𝑥 < 17.5 | ADP |
| apple | iphone_os | 𝑥 < 16.7.8 | ADP |
| apple | iphone_os | 17.0 ≤ 𝑥 < 17.5 | ADP |
| apple | macos | 14.0 ≤ 𝑥 < 14.5 | ADP |
| apple | watchos | 𝑥 < 10.5 | ADP |
Common Weakness Enumeration
References