Bypassing the Lock Screen via Physical Access
CVE-2024-44145

6.1MEDIUM

Key Information:

Vendor

Apple
Status
iOS And iPad OS
Mac OS
Vendor
CVE Published:
28 October 2024

What is CVE-2024-44145?

This issue was addressed through improved state management. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An attacker with physical access to a macOS device with Sidecar enabled may be able to bypass the Lock Screen.

Affected Version(s)

iOS and iPadOS 0 < 18

macOS 0 < 15

References

https://support.apple.com/en-us/121238
https://support.apple.com/en-us/121250

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.