CVE-2024-44258highobserved exploitationCWE-59

CVE-2024-44258: high-severity vulnerability in Apple tvOS

Published · Updated

Follow this CVE+ Monitor iOS+ Monitor iPadOS

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

63Vexday Risk Score

Prioritize patching. It exploitation observed by VulnCheck and has a public proof of concept.

ssvc Actcvss 7.1epss 1.2%
from disclosure to weapon1 day
Published on NVDOct 28
1st PoC+1d
VulnCheck+5d
This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, tvOS 18.1, visionOS 2.1. Restoring a maliciously crafted backup file may lead to modification of protected system files.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
Affected products
Apple · iOS and iPadOSApple · tvOSApple · visionOS
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Apple tvOS

In the same product, most dangerous first.

CVE-2025-43300CRITICALCVE-2025-43300EPSS 63.2%KEVCVE-2023-32434HIGHCVE-2023-32434EPSS 58.2%KEVCVE-2023-41064HIGHCVE-2023-41064EPSS 53.4%KEVCVE-2023-28205HIGHCVE-2023-28205EPSS 27.1%KEVCVE-2026-86950HIGHCVE-2026-86950EPSS 26.2%KEVCVE-2025-43529HIGHCVE-2025-43529EPSS 25.7%KEV