Researchers Detail Apple's Recent Zero-Click Shortcuts Vulnerability

Details have emerged about a now-patched high-severity security flaw in Apple's Shortcuts app that could permit a shortcut to access sensitive information on the device without users' consent.
The vulnerability, tracked as CVE-2024-23204 (CVSS score: 7.5), was addressed by Apple on January 22, 2024, with the release of iOS 17.3, iPadOS 17.3, macOS Sonoma 14.3, and 

access app apple click consent cve cvss cvss score device flaw high information ios ios 17 ios 17.3 ipados january macos release researchers score security security flaw sensitive sensitive information severity shortcuts vulnerability zero-click