CVE-2024-54550

This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15.2, iOS 18.2 and iPadOS 18.2. An app may be able to view autocompleted contact information from Messages and Mail in system logs.
References
Link Resource
https://support.apple.com/en-us/121837 Release Notes Vendor Advisory
https://support.apple.com/en-us/121839 Release Notes Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

History

04 Apr 2025, 18:19

Type Values Removed Values Added
CPE cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
First Time Apple ipados
Apple macos
Apple iphone Os
Apple
References () https://support.apple.com/en-us/121837 - () https://support.apple.com/en-us/121837 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/121839 - () https://support.apple.com/en-us/121839 - Release Notes, Vendor Advisory

19 Mar 2025, 19:15

Type Values Removed Values Added
CWE CWE-200
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 4.0

18 Feb 2025, 20:15

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 4.0
v2 : unknown
v3 : unknown
CWE CWE-863

28 Jan 2025, 16:15

Type Values Removed Values Added
Summary
  • (es) Este problema se solucionó con una redacción mejorada de información confidencial. Este problema se solucionó en macOS Sequoia 15.2, iOS 18.2 y iPadOS 18.2. Es posible que una aplicación pueda ver la información de contacto completada automáticamente de Mensajes y Correo en los registros de sistema.
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 4.0
CWE CWE-863

27 Jan 2025, 22:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-01-27 22:15

Updated : 2025-04-04 18:19


NVD link : CVE-2024-54550

Mitre link : CVE-2024-54550

CVE.ORG link : CVE-2024-54550


JSON object : View

Products Affected

apple

  • ipados
  • iphone_os
  • macos
CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor