CVEvulnerability
CVE-2024-44165
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2024-09-17
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Description
A logic issue was addressed with improved checks. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7, visionOS 2. Network traffic may leak outside a VPN tunnel.
Affected configurations
• apple macos (< 13.7)
• apple macos (>= 14.0 < 14.7)
• apple iphone os (< 17.7)
• apple ipados (< 17.7)
• apple visionos (< 2.0)
References
- https://support.apple.com/en-us/121234 Vendor Advisory
- https://support.apple.com/en-us/121238 Vendor Advisory
- https://support.apple.com/en-us/121246 Vendor Advisory
- https://support.apple.com/en-us/121247 Vendor Advisory
- https://support.apple.com/en-us/121249 Vendor Advisory
- https://support.apple.com/en-us/121250 Vendor Advisory
- http://seclists.org/fulldisclosure/2024/Sep/32 seclists.org
- http://seclists.org/fulldisclosure/2024/Sep/33 seclists.org
- http://seclists.org/fulldisclosure/2024/Sep/36 seclists.org
- http://seclists.org/fulldisclosure/2024/Sep/39 seclists.org
- http://seclists.org/fulldisclosure/2024/Sep/40 seclists.org
- http://seclists.org/fulldisclosure/2024/Sep/41 seclists.org