CVEvulnerability
CVE-2024-44274
4.6 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2024-10-28
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.6 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 4.6 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Description
The issue was addressed with improved authentication. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, watchOS 11.1. An attacker with physical access to a locked device may be able to view sensitive user information.
Affected configurations
• apple ipados (< 17.7.1)
• apple ipados (>= 18.0 < 18.1)
• apple iphone os (< 17.7.1)
• apple iphone os (>= 18.0 < 18.1)
• apple watchos (< 11.1)
References
- https://support.apple.com/en-us/121563 Vendor Advisory
- https://support.apple.com/en-us/121565 Vendor Advisory
- https://support.apple.com/en-us/121567 Vendor Advisory
- http://seclists.org/fulldisclosure/2024/Oct/10 seclists.org
- http://seclists.org/fulldisclosure/2024/Oct/14 seclists.org
- http://seclists.org/fulldisclosure/2024/Oct/9 seclists.org