CVE-2024-44179

This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15. An attacker with physical access to a device may be able to read contact numbers from the lock screen.
References
Link Resource
https://support.apple.com/en-us/121238 Vendor Advisory Release Notes
https://support.apple.com/en-us/121246 Vendor Advisory Release Notes
https://support.apple.com/en-us/121250 Vendor Advisory Release Notes
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

History

24 Mar 2025, 14:55

Type Values Removed Values Added
Summary
  • (es) Este problema se solucionó restringiendo las opciones ofrecidas en un dispositivo bloqueado. Este problema se solucionó en iOS 17.7 y iPadOS 17.7, iOS 18 y iPadOS 18, macOS Sequoia 15. Un atacante con acceso físico a un dispositivo podría leer los números de contacto desde la pantalla de bloqueo.
CPE cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
References () https://support.apple.com/en-us/121238 - () https://support.apple.com/en-us/121238 - Vendor Advisory, Release Notes
References () https://support.apple.com/en-us/121246 - () https://support.apple.com/en-us/121246 - Vendor Advisory, Release Notes
References () https://support.apple.com/en-us/121250 - () https://support.apple.com/en-us/121250 - Vendor Advisory, Release Notes
First Time Apple iphone Os
Apple
Apple macos
Apple ipados

11 Mar 2025, 03:15

Type Values Removed Values Added
CWE CWE-200
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 2.4

10 Mar 2025, 19:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-03-10 19:15

Updated : 2025-03-24 14:55


NVD link : CVE-2024-44179

Mitre link : CVE-2024-44179

CVE.ORG link : CVE-2024-44179


JSON object : View

Products Affected

apple

  • ipados
  • iphone_os
  • macos
CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor