CVE-2024-44164

This issue was addressed with improved checks. This issue is fixed in iOS 17.7 and iPadOS 17.7, macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. An app may be able to bypass Privacy preferences.
References
Link Resource
https://support.apple.com/en-us/121234 Release Notes Vendor Advisory
https://support.apple.com/en-us/121238 Release Notes Vendor Advisory
https://support.apple.com/en-us/121246 Release Notes Vendor Advisory
https://support.apple.com/en-us/121247 Release Notes Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

History

26 Sep 2024, 13:54

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.1
First Time Apple
Apple iphone Os
Apple ipados
Apple macos
References () https://support.apple.com/en-us/121234 - () https://support.apple.com/en-us/121234 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/121238 - () https://support.apple.com/en-us/121238 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/121246 - () https://support.apple.com/en-us/121246 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/121247 - () https://support.apple.com/en-us/121247 - Release Notes, Vendor Advisory
CWE NVD-CWE-noinfo
CPE cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

20 Sep 2024, 12:31

Type Values Removed Values Added
Summary
  • (es) Este problema se solucionó con comprobaciones mejoradas. Este problema se solucionó en iOS 17.7 y iPadOS 17.7, macOS Ventura 13.7, macOS Sonoma 14.7 y macOS Sequoia 15. Es posible que una aplicación pueda omitir las preferencias de privacidad.

17 Sep 2024, 00:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-09-17 00:15

Updated : 2024-09-26 13:54


NVD link : CVE-2024-44164

Mitre link : CVE-2024-44164

CVE.ORG link : CVE-2024-44164


JSON object : View

Products Affected

apple

  • macos
  • iphone_os
  • ipados