Critical · 9.1 CVE-2024-44217 EUVD-2024-40956GHSA-75qv-hw7p-g75w

A permissions issue was addressed by removing vulnerable code and adding additional checks. This issue is fixed in iOS 18 and iPadOS 18. Pa…

Published Oct 28, 2024 · Updated Apr 2, 2026 · Assigned by apple

Vendor: Apple Product: iOS and iPadOS Platform: iOS

Description

A permissions issue was addressed by removing vulnerable code and adding additional checks. This issue is fixed in iOS 18 and iPadOS 18. Password autofill may fill in passwords after failing authentication.

Affected products

Vendor	Product	Affected	Fixed
Apple	iOS and iPadOS	< 18	18

Advisories 2

WID-SEC-2024-2153 Apple iOS und iPadOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Apr 24, 2025
NCSC-2024-0457 Kwetsbaarheden verholpen in Apple iOS en iPadOS NCSC-NL (Netherlands) · Nov 20, 2024

References

https://support.apple.com/en-us/121250

EUVD	v3.1	9.1
CISA-ADP	v3.1	9.1