Skip to content
OpenAdvisories
Medium · 5.5 CVE-2024-44273 EUVD-2024-40989GHSA-ghqj-2wp8-298g

This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS Son…

Published Oct 28, 2024 · Updated Apr 2, 2026 · Assigned by apple

Vendor: Apple Product: iOS and iPadOS Product: macOS Product: tvOS Product: visionOS Product: watchOS Platform: iOS Platform: macOS

Description

This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS Sonoma 14.7.1, tvOS 18.1, visionOS 2.1, watchOS 11.1. A malicious app may be able to access private information.

Affected products

VendorProductAffectedFixed
Apple iOS and iPadOS < 18.1 18.1
Apple macOS < 14.7.1, < 15.1 14.7.1
Apple tvOS < 18.1 18.1
Apple visionOS < 2.1 2.1
Apple watchOS < 11.1 11.1

Advisories 4

References