First published: Mon Sep 16 2024(Updated: )
Accessibility. This issue was addressed by restricting options offered on a locked device.
Credit: product-security@apple.com Rodolphe BRUNETTI @eisw0lf Olivier Levon CVE-2023-5841 Alexander Heinrich SEEMOO DistriNet KU Leuven @vanhoefm TU Darmstadt @Sn0wfreeze Mathy Vanhoef ajajfxhj Bistrit Dahal an anonymous researcher Joshua Keller Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Kenneth Chew Anamika Adhikari Csaba Fitzl @theevilbit Kandji냥냥 Wojciech Regula SecuRingOm Kothawade Zaprico DigitalOmar A. Alanis the UNTHSC College of PharmacyChi Yuan Chang ZUSO ARTtaikosoup Srijan Poudel K宝 LFY @secsys Smi1e yulige Cristian Dinca (icmd.tech) Bohdan Stasiuk @Bohdan_Stasiuk Justin Cohen Ron Masas Domien Schepers dw0r ZeroPointer Lab working with Trend Micro Zero Day InitiativeAntonio Zekić Andrew Lytvynov OSS-Fuzz Google Project ZeroNed Williamson Google Project ZeroTuan D. Hoang Snoolie Keffaber @0xilis Daniele Antonioli @08Tc3wBB JamfDenis Tokarev @illusionofcha0s Junsung Lee Abhay Kailasia @abhay_kailasia Lakshmi Narain College of Technology Bhopal IndiaHolger Fuhrmannek Jake Derouin Chloe Surett
Affected Software | Affected Version | How to fix |
---|---|---|
Apple iOS, iPadOS, and watchOS | <18 | 18 |
Apple iOS, iPadOS, and watchOS | <18 | 18 |
Apple iOS, iPadOS, and watchOS | <18.0 | |
iStyle @cosme iPhone OS | <18.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2024-44147 has a moderate severity level that impacts accessibility features and data protection.
To fix CVE-2024-44147, update your Apple device to iOS or iPadOS version 18 or later.
CVE-2024-44147 affects devices running Apple iOS and iPadOS versions prior to 18.0.
CVE-2024-44147 addresses issues related to accessibility, state management, and data protection.
Not updating your device may leave it vulnerable to attacks exploiting the accessibility features addressed in CVE-2024-44147.