CVEvulnerability
CVE-2024-44180
2.4 LOW
Official page ↗
- Status
- Modified
- Published
- 2024-09-17
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 2.4 LOW — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 2.4 LOW — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- Weaknesses
- CWE-200
Description
The issue was addressed with improved checks. This issue is fixed in iOS 18 and iPadOS 18. An attacker with physical access may be able to access contacts from the lock screen.
Affected configurations
• apple ipados (< 18.0)
• apple iphone os (< 18.0)
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- https://support.apple.com/en-us/121250 Release Notes, Vendor Advisory
- http://seclists.org/fulldisclosure/2024/Sep/32 seclists.org