First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2024-44145

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

This issue was addressed through improved state management. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An attacker with physical access to a macOS device with Sidecar enabled may be able to bypass the Lock Screen.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Affected software

Vendor	Product	Versions
Apple	iOS and iPadOS	< 18
Apple	macOS	< 15
apple	mac_os	< 15
apple	ipad_os	< 18
apple	iphone_os	< 18

References

Timeline

Published: Oct 28, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-4414610.0A logic issue was addressed with improved file handling. This issue is fixed in macOS Sequoia 15. An app may be able to break out of its san CVE-2024-441475.5This issue was addressed through improved state management. This issue is fixed in iOS 18 and iPadOS 18. An app may gain unauthorized access CVE-2024-4414810.0This issue was addressed with improved validation of file attributes. This issue is fixed in macOS Sequoia 15. An app may be able to break o CVE-2024-441497.5A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. An app may be able to access protec CVE-2024-441515.5A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13 CVE-2024-441527.5A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15. An app may be a CVE-2024-441535.5The issue was addressed with improved permissions logic. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7. An app may be able to a CVE-2024-441545.5A memory initialization issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7. Proce CVE-2024-441556.5A custom URL scheme handling issue was addressed with improved input validation. This issue is fixed in Safari 18, iOS 17.7.1 and iPadOS 17.CVE-2024-441567.1A path deletion vulnerability was addressed by preventing vulnerable code from running with privileges. This issue is fixed in macOS Sequoia CVE-2024-441575.5A stack buffer overflow was addressed through improved input validation. This issue is fixed in Apple TV 1.5.0.152 for Windows, iTunes 12.13 CVE-2024-441585.5This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 17.7 and iPadOS 17.7, macOS Sequoia 15

CVE-2024-44145: Medium severity, CVSS 6.1 | Vulnix