{"id":"CVE-2024-44127","aliases":["EUVD-2024-40885","GHSA-q9mj-qff3-9v4j"],"status":"published","title":"This issue was addressed through improved state management. This issue is fixed in iOS 17.7 and...","description":"This issue was addressed through improved state management. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18. Private Browsing tabs may be accessed without authentication.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.00588,"percentile":0.4863,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-287"],"published":"2024-09-16T23:22:08Z","modified":"2026-06-17T07:52:21Z","products":[{"vendor":"apple","product":"ios and ipados"},{"vendor":"apple","product":"ipados"},{"vendor":"apple","product":"iphone_os"}],"references":[{"url":"https://support.apple.com/en-us/121246","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/en-us/121250","tags":["Vendor Advisory"]},{"url":"http://seclists.org/fulldisclosure/2024/Sep/39"},{"url":"http://seclists.org/fulldisclosure/2024/Sep/32"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-44127"},{"url":"https://github.com/advisories/GHSA-q9mj-qff3-9v4j"}],"sources":{"cve":[{"id":"CVE-2024-44127","description":"This issue was addressed through improved state management. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18. Private Browsing tabs may be accessed without authentication.","status":"published","published":"2024-09-16T23:22:08.898Z","modified":"2026-04-02T18:07:28.382Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:34:06.48311Z"}],"euvd":[{"id":"EUVD-2024-40885","description":"This issue was addressed through improved state management. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18. Private Browsing tabs may be accessed without authentication.","status":"published","published":"2024-09-16T23:22:08Z","modified":"2026-04-02T18:07:28Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T19:25:22.116757Z"}],"ghsa":[{"id":"GHSA-q9mj-qff3-9v4j","title":"This issue was addressed through improved state management. This issue is fixed in iOS 17.7 and...","description":"This issue was addressed through improved state management. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18. Private Browsing tabs may be accessed without authentication.","status":"published","published":"2024-09-17T00:31:05Z","modified":"2025-11-04T18:31:21Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T15:04:33.911399Z"}],"nvd":[{"id":"CVE-2024-44127","description":"This issue was addressed through improved state management. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18. Private Browsing tabs may be accessed without authentication.","status":"published","published":"2024-09-17T00:15:49.99Z","modified":"2026-06-17T07:52:21.3Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:10:26.717759Z"}]}}