CVE-2024-23291: 
macOS vulnerability analysis and mitigation

A privacy issue identified as CVE-2024-23291 was discovered affecting multiple Apple operating systems including tvOS 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, and watchOS 10.4. The vulnerability was disclosed and patched on March 7, 2024. The issue allows a malicious app to observe user data in log entries related to accessibility notifications (Apple Support, Apple Support).

The vulnerability stems from insufficient private data redaction in log entries related to accessibility notifications. The issue was addressed by implementing improved private data redaction for log entries. The vulnerability has a CVSS v3.1 base score of 3.3 (LOW) with vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N, though CISA-ADP assessed it at 7.5 (HIGH) with vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N (NVD).

The vulnerability allows malicious applications to potentially access sensitive user data by observing log entries specifically related to accessibility notifications. This creates a privacy risk where unauthorized apps could gather information about user accessibility interactions (Apple Support).

The vulnerability requires a malicious app to be present on the system and can be exploited to observe user data in accessibility-related log entries. No public exploits have been reported in the wild (NVD).

Apple has addressed this vulnerability by implementing improved private data redaction for log entries in the following updates: tvOS 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, and watchOS 10.4. Users are advised to update their devices to these versions to protect against potential exploitation (Apple Support, Apple Support).