CVE-2024-54558

Katalog CVE

CVSS 2.8 · Low EPSS 0,21%

Kerentanan User Interface (UI) Misrepresentation of Critical Information pada apple ipados, apple iphone os +1 lainnya. Skor CVSS 3.1 2.8 (Low) menurut CISA ADP.

Deskripsi (NVD)

A clickjacking issue was addressed with improved out-of-process view handling. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An app may be able to trick a user into granting access to photos from the user's photo library.

Rincian

Terbit di NVD

10 Maret 2025

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

2.8 (Low), sumber CISA ADP
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-451: User Interface (UI) Misrepresentation of Critical Information

EPSS (30 hari)

0,21% peluang dieksploitasi; lebih tinggi dari 10,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://support.apple.com/en-us/121238 release notes · advisory vendor
• https://support.apple.com/en-us/121250 release notes · advisory vendor