VULNERABILITY INTELLIGENCE
CVE-2024-44217
CVSS score9.1 CRITICAL
EPSS probability0.38%
CISA KEVNot currently listed
Published2024-10-28
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Description
A permissions issue was addressed by removing vulnerable code and adding additional checks. This issue is fixed in iOS 18 and iPadOS 18. Password autofill may fill in passwords after failing authentication.
Weakness classification
- nvd@nist.gov: CWE-863
Primary references
- product-security@apple.com — Vendor Advisory