Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-44273

This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 18.1 and iPadOS 18.1, visionOS 2.1, macOS Sonoma 14.7.1, watchOS 11.1, tvOS 18.1. A malicious app may be able to access private information.

Published

2024-10-28T21:15:07.737

Last Modified

2024-12-09T15:15:16.147

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.5 (MEDIUM)

Weaknesses

Type: Primary
CWE-59
Type: Secondary
CWE-59

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	apple	ipados	< 18.1	Yes
Operating System	apple	iphone_os	< 18.1	Yes
Operating System	apple	macos	< 14.7.1	Yes
Operating System	apple	tvos	< 18.1	Yes
Operating System	apple	visionos	< 2.1	Yes
Operating System	apple	watchos	< 11.1	Yes

References

https://support.apple.com/en-us/121563 Vendor Advisory ([email protected])
https://support.apple.com/en-us/121565 Vendor Advisory ([email protected])
https://support.apple.com/en-us/121566 Vendor Advisory ([email protected])
https://support.apple.com/en-us/121569 Vendor Advisory ([email protected])
https://support.apple.com/en-us/121570 Vendor Advisory ([email protected])