CVE-2024-54542
critical · 9.1An authentication issue was addressed with improved state management. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, watchOS 11.2. Private Browsing tabs may be accessed without authentication.
9.1
CVSS
0.7%
EPSS (exploit prob.)
52nd
EPSS percentile
2025-01-27
Published
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Weaknesses
CWE-862
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| apple | safari | < 18.2 |
| apple | ipados | < 18.2 |
| apple | iphone_os | < 18.2 |
| apple | macos | < 15.2 |
| apple | watchos | < 11.2 |
Check a specific version with /api/v1/cve/match.
References
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2024-54542