CVE-2024-27852 — Apple / iOS and iPadOS

CVE-2024-27852

Apple / iOS and iPadOS PUBLISHED

Description (CNA)

A privacy issue was addressed with improved client ID handling for alternative app marketplaces. This issue is fixed in iOS 17.5 and iPadOS 17.5. A maliciously crafted webpage may be able to distribute a script that tracks users on other webpages.

Affected (CNA)

Vendor / product	Versions
Apple / iOS and iPadOS	affected 0 before 17.5

CWE

No CWE identifiers supplied.

References

https://support.apple.com/en-us/120905

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.

https://support.apple.com/en-us/HT214101
http://seclists.org/fulldisclosure/2024/May/10
https://support.apple.com/kb/HT214101