CVE-2024-54560

A logic issue was addressed with improved checks. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15, tvOS 18, watchOS 11. A malicious app may be able to modify other apps without having App Management permission.

Score

CVSS 3.1 5.5 Medium

Status

Modified - product-security@apple.com

Published

2025-03-10

Last modified

2026-06-09

Weaknesses

CWE-269

Affected products

• Ios And Ipados (Apple)
• Ipados (Apple)
• Iphone Os (Apple)
• Macos (Apple)
• Tvos (Apple)
• Watchos (Apple)

References

• https://support.apple.com/en-us/121238
• https://support.apple.com/en-us/121240
• https://support.apple.com/en-us/121248
• https://support.apple.com/en-us/121250