CVE-2024-27852: Apple iPadOS

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

A privacy issue was addressed with improved client ID handling for alternative app marketplaces. This issue is fixed in iOS 17.5 and iPadOS 17.5. A maliciously crafted webpage may be able to distribute a script that tracks users on other webpages.

Affected products

• Apple iPadOS: before 17.5 (fixed in 17.5)
• Apple iPhone OS: before 17.5 (fixed in 17.5)

Published 2024-05-14. Last modified 2026-06-17.