CVE-2024-44290

3.3LOW

Key Information

Vendor
Apple
Status
iPad OS
iPhone OS
Watch OS
Vendor
CVE Published:
12 December 2024

Summary

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.1 and iPadOS 18.1, watchOS 11.1. An app may be able to determine a user’s current location.

References

https://support.apple.com/en-us/121563
https://support.apple.com/en-us/121565

CVSS V3.1

Score:
3.3
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

Collectors

NVD Database
.