CVE-2024-44274

CVE-2024-44274 is an authentication bypass vulnerability affecting iOS, iPadOS, and watchOS. The issue exists in the device's lock screen mechanism, allowing an attacker with physical access to a locked device to bypass authentication and view sensitive user information. Apple addressed the flaw by improving authentication processes [1][2][3].

To exploit this vulnerability, an attacker must have physical possession of a locked device running an affected version of iOS, iPadOS, or watchOS. No user interaction is required beyond the device being locked. The attacker can then access sensitive information without proper credentials [1][2][3].

The impact is limited to information disclosure, but it could expose personal data such as messages, photos, or other private content stored on the device. The vulnerability does not allow remote exploitation or privilege escalation beyond viewing on-screen information [1][2][3].

Apple has released patches in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, and watchOS 11.1. Users are strongly advised to update their devices to the latest available versions. The vulnerability was discovered by security researchers Rizki Maulana, Matthew Butler, and Jake Derouin [1][2][3].