Medium severity4.3NVD Advisory· Published Jan 15, 2025· Updated Apr 2, 2026

CVE-2024-54535

Description

A path handling issue was addressed with improved logic. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, visionOS 2.1, watchOS 11.1. An attacker with access to calendar data could also read reminders.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Apple Inc./Ipados
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
Range: <18.1
Apple Inc./Iphone OS
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Range: <18.1
Apple Inc./Visionos
cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*
Range: <2.1
Apple Inc./watchOS2 versions
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*range: <11.1
- (no CPE)range: <11.1
Apple Inc./macOS Sequoiallm-fuzzy
Range: <15.1
Apple Inc./iOSllm-fuzzy
Range: <18.1

Patches

Vulnerability mechanics

References

support.apple.com/en-us/121563nvdVendor Advisory
support.apple.com/en-us/121565nvdVendor Advisory
support.apple.com/en-us/121566nvdVendor Advisory
support.apple.com/en-us/121564nvd

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000