Skip to content
OpenAdvisories
Low · 2.8 CVE-2024-54558 EUVD-2024-54261GHSA-xq2q-rgqf-8r75

A clickjacking issue was addressed with improved out-of-process view handling. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 1…

Published Mar 10, 2025 · Updated Apr 2, 2026 · Assigned by apple

Vendor: Apple Product: iOS and iPadOS Product: macOS Platform: iOS Platform: macOS

Description

A clickjacking issue was addressed with improved out-of-process view handling. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An app may be able to trick a user into granting access to photos from the user's photo library.

Affected products

VendorProductAffectedFixed
Apple iOS and iPadOS < 18 18
Apple macOS < 15 15

Advisories 1

References