CVE-2024-44123 — Apple IOS AND Ipados vulnerability

5 documents4 sources
Severity
2.3LOWNVD
EPSS
0.1%
top 83.58%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Apple IOS AND IpadosApple MacosApple Ipados+1 more
Timeline
PublishedOct 28

Description

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. A malicious app with root privileges may be able to access keyboard input and location information without user consent.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:NExploitability: 0.8 | Impact: 1.4

Affected Packages5 packages

▶CVEListV5apple/macos< 15
▶NVDapple/macos< 15.0
▶NVDapple/ipados< 18.0
▶CVEListV5apple/ios_and_ipados< 18
▶NVDapple/iphone_os< 18.0

🔴Vulnerability Details

2
CVEList
CVE-2024-44123: A permissions issue was addressed with additional restrictions↗2024-10-28
▶
GHSA
GHSA-2298-pcfp-56j2: A permissions issue was addressed with additional restrictions↗2024-10-28
▶

📋Vendor Advisories

2
Apple
CVE-2024-44123: macOS Sequoia 15↗2024-09-16
▶
Apple
CVE-2024-44123: iOS 18 and iPadOS 18↗2024-09-16
▶
CVE-2024-44123 — Apple IOS AND Ipados vulnerability | cvebase