CVE-2024-44205

MEDIUM

iPadOS < 16.7.9 - Sensitive Information Exposure in System Logs

Title source: llm

Description

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. A sandboxed app may be able to access sensitive user data in system logs.

References (5)

Core 5

Core References

Release Notes, Vendor Advisory

https://support.apple.com/en-us/120908

Release Notes, Vendor Advisory

https://support.apple.com/en-us/120909

Release Notes, Vendor Advisory

https://support.apple.com/en-us/120910

Release Notes, Vendor Advisory

https://support.apple.com/en-us/120911

Release Notes, Vendor Advisory

https://support.apple.com/en-us/120912

Scores

CVSS v3 5.5

EPSS 0.0019

EPSS Percentile 8.4%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-532

Status published

Products (8)

Apple/iOS and iPadOS < 16.7.9

Apple/iOS and iPadOS < 17.6

apple/ipados < 16.7.9

apple/iphone_os < 16.7.9

apple/macos < 12.7.6

Apple/macOS < 12.7.6

Apple/macOS < 13.6.8

Apple/macOS < 14.6

Published Oct 24, 2024

Tracked Since Feb 18, 2026