CVE-2024-54530

CRITICAL | Platform: iPadOS | Changelog

CVE Details

Description

The issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, visionOS 2.2, watchOS 11.2. Password autofill may fill in passwords after failing authentication.

CVSS 3.1 Score

Metric	Value
Base Score	9.1 (CRITICAL)
Vector	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N`

Weakness

CWE-863

References

Apple Security Advisory
NVD Entry
https://support.apple.com/en-us/121839 (Release Notes, Vendor Advisory)
https://support.apple.com/en-us/121843 (Release Notes, Vendor Advisory)
https://support.apple.com/en-us/121845 (Release Notes, Vendor Advisory)