Bypassing the Lock Screen via Physical Access

CVE-2024-44145

6.1MEDIUM

Key Information

Vendor
Apple
Status
Mac OS
iPhone OS
iPad OS
Vendor
CVE Published:
28 October 2024

Summary

This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15, iOS 18 and iPadOS 18. An attacker with physical access to a macOS device with Sidecar enabled may be able to bypass the Lock Screen.

References

https://support.apple.com/en-us/121238
https://support.apple.com/en-us/121250

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
None
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

Collectors

NVD Database
.