CVE-2024-54530

The issue was addressed with improved checks

Critical · published January 27, 2025

CVSS v3.1
9.1
EPSS
1%
Percentile
46.3
In the wild
Unconfirmed
What it is

🚨 Password autofill could betray you! This vulnerability allows autofill to fill in passwords even after failed authentication attempts, potentially exposing sensitive information! 🔥 Think of it like a hotel room key that still works, even after you've checked out — imagine the chaos if anyone could waltz into your room without permission! An attacker could exploit this to gain unauthorized access to sensitive accounts, leading to data breaches and identity theft. Your private information could be just a password away from the wrong hands, and that’s absolutely devastating!

Put simply

Think of it like a hotel room key that still works, even after you've checked out — imagine the chaos if anyone could waltz into your room without permission! This vulnerability in password autofill functionality means that even after a failed login attempt, the system may still autofill credentials, potentially allowing unauthorized access to accounts.

What to do

An attacker could exploit this to gain unauthorized access to sensitive accounts, leading to data breaches and identity theft. Your private information could be just a password away from the wrong hands, and that’s absolutely devastating! Update to iOS 18.2, iPadOS 18.2, macOS Sequoia 15.2, visionOS 2.2, and watchOS 11.2 to patch this vulnerability immediately. Ensure users are aware of the issue and advise them to manually enter passwords until updated! You've got this! Apply those updates, and you'll be back in superhero status, protecting your data! 🛡️

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00567 · 46.3th percentile
Published
2025-01-27T21:45Z
EPSS history
Timeline
  • 27 JAN 21:45Z
    The issue was addressed with improved checks
    cvelistv5