CVEvulnerability
CVE-2024-54513
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2024-12-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 5.7 MEDIUM — CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-281
Description
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, tvOS 18.2, visionOS 2.2, watchOS 11.2. An app may be able to access sensitive user data.
Affected configurations
• apple ipados (< 18.2)
• apple iphone os (< 18.2)
• apple macos (< 15.2)
• apple tvos (< 18.2)
• apple visionos (< 2.2)
• apple watchos (< 11.2)
Related
Weakness · CWE (1)
- CWE-281 Improper Preservation of Permissions weakness
References
- https://support.apple.com/en-us/121837 Vendor Advisory
- https://support.apple.com/en-us/121839 Vendor Advisory
- https://support.apple.com/en-us/121843 Vendor Advisory
- https://support.apple.com/en-us/121844 Vendor Advisory
- https://support.apple.com/en-us/121845 Vendor Advisory
- http://seclists.org/fulldisclosure/2024/Dec/11 seclists.org
- http://seclists.org/fulldisclosure/2024/Dec/12 seclists.org
- http://seclists.org/fulldisclosure/2024/Dec/5 seclists.org
- http://seclists.org/fulldisclosure/2024/Dec/7 seclists.org