CVE-2024-44158

EPSS 0.06%
Published 17.09.2024 00:15:50
Last modified 19.03.2025 15:15:50
Source product-security@apple.com
Teams watchlist Login
Open Login

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 17.7 and iPadOS 17.7, macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. A shortcut may output sensitive user data without consent.

Affected products Warnungen 0 Metrics 3 CWE 1 References 7

Data is provided by the National Vulnerability Database (NVD)

Apple ≫ iPadOS Version < 17.7

Apple ≫ iPhone OS Version < 17.7

Apple ≫ macOS Version < 13.7

Apple ≫ macOS Version >= 14.0 < 14.7

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.06%	0.191

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5.5	1.8	3.6	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
134c704f-9b21-4f2e-91b3-4a467353bcc0	5.5	1.8	3.6	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

https://support.apple.com/en-us/121238

Release Notes

https://support.apple.com/en-us/121234

Release Notes

https://support.apple.com/en-us/121246

Release Notes

https://support.apple.com/en-us/121247

Release Notes

https://nvd.nist.gov/vuln/detail/CVE-2024-44158

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-44158

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-44158

EUVD