Description (CNA)
A logic issue was addressed with improved checks. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, watchOS 10.6. A shortcut may be able to use sensitive data with certain actions without prompting the user.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Apple / iOS and iPadOS | affected 0 before 16.7.9; affected 0 before 17.6 |
| Apple / macOS | affected 0 before 14.6 |
| Apple / watchOS | affected 0 before 10.6 |
CWE
No CWE identifiers supplied.
References
- https://support.apple.com/en-us/120908
- https://support.apple.com/en-us/120909
- https://support.apple.com/en-us/120911
- https://support.apple.com/en-us/120916
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.
- https://support.apple.com/en-us/HT214117
- https://support.apple.com/en-us/HT214116
- https://support.apple.com/en-us/HT214124
- https://support.apple.com/en-us/HT214119
- http://seclists.org/fulldisclosure/2024/Jul/16
- http://seclists.org/fulldisclosure/2024/Jul/21
- http://seclists.org/fulldisclosure/2024/Jul/17
- http://seclists.org/fulldisclosure/2024/Jul/18
- https://support.apple.com/kb/HT214124
- https://support.apple.com/kb/HT214119
- https://support.apple.com/kb/HT214117
- https://support.apple.com/kb/HT214116