CVE-2024-54558 — Apple / iOS and iPadOS

CVE-2024-54558

Apple / iOS and iPadOS PUBLISHED

Description (CNA)

A clickjacking issue was addressed with improved out-of-process view handling. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An app may be able to trick a user into granting access to photos from the user's photo library.

Affected (CNA)

Vendor / product	Versions
Apple / iOS and iPadOS	affected 0 before 18
Apple / macOS	affected 0 before 15

CWE

No CWE identifiers supplied.

References

https://support.apple.com/en-us/121238
https://support.apple.com/en-us/121250

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.