Logic Issue in Apple iOS and iPadOS Affecting User Data Access
CVE-2024-44263

5.5MEDIUM

Key Information:

Vendor

Apple
Status
iPad OS
iPhone OS
Vendor
CVE Published:
28 October 2024

What is CVE-2024-44263?

A logic issue has been identified in Apple's iOS and iPadOS platforms that may permit an app to access sensitive user data without appropriate authorization. This vulnerability, associated with improper state management, can potentially expose personal information if exploited. It is imperative for users to update their devices to iOS 18.1 or iPadOS 18.1 to mitigate the risk of unauthorized data access. Apple has addressed this issue in the latest updates to enhance user security and safeguard sensitive information.

References

https://support.apple.com/en-us/121563

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

.