5.5
MEDIUM CVSS 3.1
CVE-2024-44131
iPhone Weak Symlink Data Access
Description

This issue was addressed with improved validation of symlinks. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An app may be able to access sensitive user data.

INFO

Published Date :

Sept. 17, 2024, 12:15 a.m.

Last Modified :

March 25, 2025, 5:16 p.m.

Remotely Exploit :

No
Affected Products

The following products are affected by CVE-2024-44131 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID Vendor Product Action
1 Apple macos
2 Apple iphone_os
3 Apple ipados
CVSS Scores
The Common Vulnerability Scoring System is a standardized framework for assessing the severity of vulnerabilities in software and systems. We collect and displays CVSS scores from various sources for each CVE.
Score Version Severity Vector Exploitability Score Impact Score Source
CVSS 3.1 MEDIUM [email protected]
CVSS 3.1 MEDIUM 134c704f-9b21-4f2e-91b3-4a467353bcc0
Solution
The vendor has released updates to address a vulnerability that may allow an app to access sensitive user data.
  • Update iOS to version 18 or later.
  • Update macOS to version 15.0 or later.
References to Advisories, Solutions, and Tools

Here, you will find a curated list of external links that provide in-depth information, practical solutions, and valuable tools related to CVE-2024-44131.

URL Resource
https://support.apple.com/en-us/121238 Release Notes
https://support.apple.com/en-us/121250 Release Notes
CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2024-44131 is associated with the following CWEs:

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2024-44131 weaknesses.

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2024-44131 vulnerability anywhere in the article.

  • Daily CyberSecurity
The Backdoor Is No More: UK Government Drops Demand for Access to iCloud

In February 2025, reports emerged claiming that the UK government had secretly issued a notice to Apple, demanding the company introduce a backdoor into its iCloud service. The intent was to allow gov ... Read more

Published Date: Aug 20, 2025 (2 weeks, 1 day ago)
  • Daily CyberSecurity
Microsoft Uncovers “Sploitlight”: macOS Flaw (CVE-2025-31199) Bypasses TCC, Leaking Apple Intelligence Data

Microsoft Threat Intelligence has unveiled a critical macOS vulnerability that exploits Spotlight plugins to bypass the system’s Transparency, Consent, and Control (TCC) protections. Dubbed “Sploitlig ... Read more

Published Date: Jul 29, 2025 (1 month ago)
  • Daily CyberSecurity
Apple Sues Ex-Vision Pro Engineer Di Liu: Accused of Stealing Secrets & Joining Competitor Snap

As development on the successor to the Vision Pro continues apace, Apple has recently filed a lawsuit accusing former senior product design engineer Di Liu of failing to disclose his employment at com ... Read more

Published Date: Jul 02, 2025 (2 months ago)
  • Cybersecurity News
Data Privacy Row: Apple Takes UK Government to Court

Reports have surfaced alleging that the UK government secretly issued an order to Apple, demanding the creation of a backdoor within iCloud that would grant British law enforcement agencies access to ... Read more

Published Date: Mar 05, 2025 (5 months, 4 weeks ago)
  • Cybersecurity News
macOS Vulnerability CVE-2024-54527 Unveiled: TCC Bypass PoC Exploit Code Released

A detailed technical and a proof-of-concept (PoC) exploit code from security researcher Mickey Jin has unveiled a critical TCC (Transparency, Consent, and Control) bypass vulnerability in macOS, CVE-2 ... Read more

Published Date: Jan 09, 2025 (7 months, 3 weeks ago)
  • The Hacker News
Researchers Uncover Symlink Exploit Allowing TCC Bypass in iOS and macOS

Vulnerability / Device Security Details have emerged about a now-patched security vulnerability in Apple's iOS and macOS that, if successfully exploited, could sidestep the Transparency, Consent, and ... Read more

Published Date: Dec 12, 2024 (8 months, 3 weeks ago)
  • Cybersecurity News
Researcher Details CVE-2024-44131 – A Critical TCC Bypass in macOS and iOS

Jamf Threat Labs has identified a vulnerability in Apple’s Transparency, Consent, and Control (TCC) security framework. Designated as CVE-2024-44131, this flaw enables malicious applications to bypass ... Read more

Published Date: Dec 11, 2024 (8 months, 3 weeks ago)
  • seclists.org
APPLE-SA-09-16-2024-2 macOS Sequoia 15

Full Disclosure mailing list archives From: Apple Product Security via Fulldisclosure <fulldisclosure () seclists org> Date: Mon, 16 Sep 2024 18:06:25 -0700 -----BEGIN PGP SIGNED MESSAGE----- Hash: SH ... Read more

Published Date: Sep 17, 2024 (11 months, 2 weeks ago)
  • seclists.org
APPLE-SA-09-16-2024-1 iOS 18 and iPadOS 18

Full Disclosure mailing list archives From: Apple Product Security via Fulldisclosure <fulldisclosure () seclists org> Date: Mon, 16 Sep 2024 18:05:02 -0700 -----BEGIN PGP SIGNED MESSAGE----- Hash: SH ... Read more

Published Date: Sep 17, 2024 (11 months, 2 weeks ago)

The following table lists the changes that have been made to the CVE-2024-44131 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

  • CVE Modified by 134c704f-9b21-4f2e-91b3-4a467353bcc0

    Mar. 25, 2025

    Action Type Old Value New Value
    Added CVSS V3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
    Added CWE CWE-59
  • Initial Analysis by [email protected]

    Sep. 24, 2024

    Action Type Old Value New Value
    Added CVSS V3.1 NIST AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
    Changed Reference Type https://support.apple.com/en-us/121238 No Types Assigned https://support.apple.com/en-us/121238 Release Notes
    Changed Reference Type https://support.apple.com/en-us/121250 No Types Assigned https://support.apple.com/en-us/121250 Release Notes
    Added CWE NIST CWE-59
    Added CPE Configuration OR *cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* versions up to (excluding) 18.0 *cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* versions up to (excluding) 18.0 *cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* versions up to (excluding) 15.0
  • CVE Received by [email protected]

    Sep. 17, 2024

    Action Type Old Value New Value
    Added Description This issue was addressed with improved validation of symlinks. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An app may be able to access sensitive user data.
    Added Reference Apple Inc. https://support.apple.com/en-us/121238 [No types assigned]
    Added Reference Apple Inc. https://support.apple.com/en-us/121250 [No types assigned]
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.
Vulnerability Scoring Details
Base CVSS Score: 5.5
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact