CVEvulnerability
CVE-2024-44286
7.5 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2026-04-02
- Last modified
- 2026-07-24
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-288
Description
This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.1. An attacker with physical access can input keyboard events to apps running on a locked device.
Affected configurations
• apple macos (< 15.1)
Related
Weakness · CWE (1)
- CWE-288 Authentication Bypass Using an Alternate Path or Channel weakness
References
- https://support.apple.com/en-us/121564 Release Notes, Vendor Advisory