CVE-2024-54530

critical · 9.1

The issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, visionOS 2.2, watchOS 11.2. Password autofill may fill in passwords after failing authentication.

9.1

CVSS

0.6%

EPSS (exploit prob.)

46th

EPSS percentile

2025-01-27

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weaknesses

CWE-863

Affected products

Vendor	Product	Affected versions
apple	ipados	< 18.2
apple	iphone_os	< 18.2
apple	macos	< 15.2
apple	visionos	< 2.2
apple	watchos	< 11.2

Check a specific version with /api/v1/cve/match.

References

https://support.apple.com/en-us/121837
https://support.apple.com/en-us/121839
https://support.apple.com/en-us/121843
https://support.apple.com/en-us/121845

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2024-54530