{"id":"CVE-2024-44217","state":"PUBLISHED","title":"A permissions issue was addressed by removing vulnerable code and adding additional checks. This issue is fixed in iOS 18 and iPadOS 18. Password autofill may fill in passwords aft","description":"A permissions issue was addressed by removing vulnerable code and adding additional checks. This issue is fixed in iOS 18 and iPadOS 18. Password autofill may fill in passwords after failing authentication.","publishedAt":"2024-10-28T21:08:36.026Z","updatedAt":"2026-04-02T18:25:31.575Z","severity":{"score":9.1,"label":"Critical","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","source":"CISA-ADP"},"assigner":"apple","products":["Apple iOS and iPadOS"],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"version":"0","status":"affected","lessThan":"18","versionType":"custom"}]}],"references":["https://support.apple.com/en-us/121250"],"weaknesses":[],"ingestedAt":"2026-10-29T20:07:47.831Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/44xxx/CVE-2024-44217.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2024-44217","state":"PUBLISHED","datePublished":"2024-10-28T21:08:36.026Z","dateUpdated":"2026-04-02T18:25:31.575Z","assignerShortName":"apple","assignerOrgId":"286789f9-fbc2-4510-9f9a-43facdede74c","dateReserved":"2024-08-20T21:42:05.944Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A permissions issue was addressed by removing vulnerable code and adding additional checks. This issue is fixed in iOS 18 and iPadOS 18. Password autofill may fill in passwords after failing authentication."}],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"version":"0","status":"affected","lessThan":"18","versionType":"custom"}]}],"references":[{"url":"https://support.apple.com/en-us/121250"}],"problemTypes":[{"descriptions":[{"lang":"en","description":"Password autofill may fill in passwords after failing authentication"}]}],"providerMetadata":{"shortName":"apple","orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","dateUpdated":"2026-04-02T18:25:31.575Z"}},"adp":[{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"apple","product":"ipad_os","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"18","versionType":"custom"}],"cpes":["cpe:2.3:o:apple:ipad_os:*:*:*:*:*:*:*:*"]},{"vendor":"apple","product":"iphone_os","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"18","versionType":"custom"}],"cpes":["cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*"]}],"metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":9.1,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"timestamp":"2024-10-29T19:42:31.694039Z","id":"CVE-2024-44217","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"type":"CWE","lang":"en","description":"CWE-noinfo Not enough information"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-10-29T19:45:31.845Z"}}]}}}