First published: Mon Sep 16 2024(Updated: )
Accessibility. This issue was addressed by restricting options offered on a locked device.
Credit: Denis Tokarev @illusionofcha0s Junsung Lee dw0r ZeroPointer Lab working with Trend Micro Zero Day Initiativean anonymous researcher Antonio Zekić Andrew Lytvynov Alexander Heinrich SEEMOO DistriNet KU Leuven @vanhoefm TU Darmstadt @Sn0wfreeze Mathy Vanhoef Kirin @Pwnrin Jeff Johnson (underpassapp.com) OSS-Fuzz Google Project ZeroNed Williamson Google Project ZeroRodolphe BRUNETTI @eisw0lf Olivier Levon CVE-2023-5841 ajajfxhj Bistrit Dahal Joshua Keller Lukas Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Kenneth Chew Anamika Adhikari Csaba Fitzl @theevilbit Kandji냥냥 Wojciech Regula SecuRingOm Kothawade Zaprico DigitalOmar A. Alanis the UNTHSC College of PharmacyMatej Moravec @MacejkoMoravec Chi Yuan Chang ZUSO ARTtaikosoup Srijan Poudel K宝 LFY @secsys Smi1e yulige Cristian Dinca (icmd.tech) Ron Masas BreakPointBohdan Stasiuk @Bohdan_Stasiuk Justin Cohen Narendra Bhati Cyber Security At Suma Soft PvtManager Cyber Security At Suma Soft PvtTashita Software Security Ron Masas Tim Michaud @TimGMichaud MoveworksPreet Dsouza (Fleming College Computer Security & Investigations Program) Domien Schepers Snoolie Keffaber @0xilis Daniele Antonioli @08Tc3wBB JamfTuan D. Hoang Chloe Surett Jake Derouin (jakederouin.com) Abhay Kailasia @abhay_kailasia Lakshmi Narain College of Technology Bhopal IndiaHolger Fuhrmannek product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
Apple iOS and iPadOS | <18 | 18 |
Apple iOS, iPadOS, and macOS | <18 | 18 |
Apple iOS, iPadOS, and macOS | <18.0 | |
iPhone OS | <18.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2024-44147 has a moderate severity level that impacts accessibility features and data protection.
To fix CVE-2024-44147, update your Apple device to iOS or iPadOS version 18 or later.
CVE-2024-44147 affects devices running Apple iOS and iPadOS versions prior to 18.0.
CVE-2024-44147 addresses issues related to accessibility, state management, and data protection.
Not updating your device may leave it vulnerable to attacks exploiting the accessibility features addressed in CVE-2024-44147.