First published: Mon Oct 28 2024(Updated: )
Accessibility. The issue was addressed with improved authentication.
Credit: Rizki Maulana (rmrizki.my.id) Matthew Butler Jake Derouin an anonymous researcher Ivan Fratric Google Project ZeroK宝 @Pwnrin pattern-f @pattern_F_ Loadshine LabHikerell Loadshine LabHossein Lotfi @hosselot Trend Micro Zero Day InitiativeWang Yu CyberservalJunsung Lee Trend Micro Zero Day InitiativeJex Amro Ye Zhang @VAR10CK Baidu SecurityZiyi Zhou Jiao Tong University) @Shanghai Tianxiao Hou Jiao Tong University) @Shanghai Mateusz Krzywicki @krzywix Ben Roeder Hichem Maloufi Christian Mina Ismail Amzdak Nimrat Khalsa Davis Dai James Gill @infosec.exchange) @jjtech an anonymous researcher Dawn Security Lab of JDYinyi Wu @_3ndy1 Dawn Security Lab of JDNarendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Lucas Di Tomase Michael DePlante @izobashi Trend Micro Zero Day InitiativeBing Shi Alibaba GroupWenchao Li Alibaba GroupXiaolong Bai Alibaba Group Indiana University BloomingtonLuyi Xing Indiana University BloomingtonKirin @Pwnrin Bistrit Dahal Kenneth Chew Rodolphe Brunetti @eisw0lf Abhay Kailasia @abhay_kailasia Lakshmi Narain College of Technology Bhopal IndiaSrijan Poudel 7feilee Cristian Dinca (icmd.tech) Dalibor Milanovic Richard Hyunho Im with Route Zero Security @richeeta Braylon @softwarescool Wojciech Regula SecuRingQ1IQ @q1iqF P1umer @p1umer 냥냥 Justin Saboo product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
tvOS | <18.1 | 18.1 |
visionOS | <2.1 | 2.1 |
Apple iOS and iPadOS | <18.1 | 18.1 |
Apple iOS, iPadOS, and macOS | <18.1 | 18.1 |
Apple iOS and iPadOS | <17.7.1 | 17.7.1 |
Apple iOS, iPadOS, and macOS | <17.7.1 | 17.7.1 |
Apple iOS, iPadOS, and macOS | <17.7.1 | |
Apple iOS, iPadOS, and macOS | >=18.0<18.1 | |
iPhone OS | <17.7.1 | |
iPhone OS | >=18.0<18.1 | |
tvOS | <18.1 | |
visionOS | <2.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Appears in the following advisories)
(Found alongside the following vulnerabilities)
CVE-2024-44258 is classified as a serious vulnerability that may affect the security and functionality of Apple devices.
To fix CVE-2024-44258, update your affected Apple device to the latest version available, which resolves the identified issues.
CVE-2024-44258 affects Apple products running visionOS up to 2.1, tvOS, iOS, and iPadOS up to 18.1 or iOS and iPadOS versions 17.7.1.
CVE-2024-44258 impacts the accessibility features and path handling logic in Apple devices, potentially affecting their performance.
Currently, the best approach to mitigate CVE-2024-44258 is to apply the security updates rather than relying on workarounds.