VulnerabilityModified

CVE-2024-54485

An attacker with physical access to an iOS device may be able to view notification content from the lock screen.

LOW 2.4EPSS 0.29%

Does this matter?

Lower severity and a low EPSS score (0.29%). Track it; it rarely justifies an emergency change on its own.

Description

The issue was addressed by adding additional logic. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2. An attacker with physical access to an iOS device may be able to view notification content from the lock screen.

CVSS 3.1: 2.4 LOWCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS: 0.29% probability · 21th percentile
CISA KEV: Not listed
Weakness: CWE-922
Affected: apple/ipados · apple/iphone os
Source: product-security@apple.com

References

https://support.apple.com/en-us/121837Vendor Advisory
https://support.apple.com/en-us/121838Vendor Advisory
https://support.apple.com/en-us/121839
http://seclists.org/fulldisclosure/2024/Dec/6

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.