CVE-2024-44274
published 2024-10-28CVE-2024-44274: The issue was addressed with improved authentication. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, watchOS 11.1. An attacker…
PriorityP419medium4.6CVSS 3.1
AVPACLPRNUINSUCHINAN
EPSS
0.44%
35.6th percentile
The issue was addressed with improved authentication. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, watchOS 11.1. An attacker with physical access to a locked device may be able to view sensitive user information.
Affected
10 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | ios_17.7.1_and_ipados | — | — |
| apple | ios_18.1_and_ipados | — | — |
| apple | ios_and_ipados | < 17.7.1 | 17.7.1 |
| apple | ios_and_ipados | < 18.1 | 18.1 |
| apple | ipados | < 17.7.1 | 17.7.1 |
| apple | ipados | >= 18.0 < 18.1 | 18.1 |
| apple | iphone_os | < 17.7.1 | 17.7.1 |
| apple | iphone_os | >= 18.0 < 18.1 | 18.1 |
| apple | watchos | < 11.1 | 11.1 |
| apple | watchos11.1 | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Apple
CVE-2024-44274: watchOS11.1
vendor_apple·2024-10-28·CVSS 4.6
CVE-2024-44274 [MEDIUM] CVE-2024-44274: watchOS11.1
Apple Security Update: About the security content of watchOS11.1
Product: watchOS11.1
CVE: CVE-2024-44274
Component: Accessibility
Impact: An attacker with physical access to a locked device may be able to view sensitive user information
Description: The issue was addressed with improved authentication.
Apple
CVE-2024-44274: iOS 17.7.1 and iPadOS 17.7.1
vendor_apple·2024-10-28·CVSS 4.6
CVE-2024-44274 [MEDIUM] CVE-2024-44274: iOS 17.7.1 and iPadOS 17.7.1
Apple Security Update: About the security content of iOS 17.7.1 and iPadOS 17.7.1
Product: iOS 17.7.1 and iPadOS
Version: 17.7.1
CVE: CVE-2024-44274
Component: Accessibility
Impact: An attacker with physical access to a locked device may be able to view sensitive user information
Description: The issue was addressed with improved authentication.
Apple
CVE-2024-44274: iOS 18.1 and iPadOS 18.1
vendor_apple·2024-10-28·CVSS 4.6
CVE-2024-44274 [MEDIUM] CVE-2024-44274: iOS 18.1 and iPadOS 18.1
Apple Security Update: About the security content of iOS 18.1 and iPadOS 18.1
Product: iOS 18.1 and iPadOS
Version: 18.1
CVE: CVE-2024-44274
Component: Accessibility
Impact: An attacker with physical access to a locked device may be able to view sensitive user information
Description: The issue was addressed with improved authentication.
GHSA
GHSA-jjpr-6x73-f9v6: The issue was addressed with improved authentication
ghsa_unreviewed·2024-10-28
CVE-2024-44274 [MEDIUM] GHSA-jjpr-6x73-f9v6: The issue was addressed with improved authentication
The issue was addressed with improved authentication. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, watchOS 11.1, iOS 18.1 and iPadOS 18.1. An attacker with physical access to a locked device may be able to view sensitive user information.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-10-28
Published