CVE-2024-54512: Apple iPadOS

Critical severity, CVSS 9.1. EPSS: 0.4% chance of exploitation in the next 30 days.

The issue was addressed by removing the relevant flags. This issue is fixed in iOS 18.2 and iPadOS 18.2, watchOS 11.2. A system binary could be used to fingerprint a user's Apple Account.

Affected products

• Apple iPadOS: before 18.2 (fixed in 18.2)
• Apple iPhone OS: before 18.2 (fixed in 18.2)
• Apple watchOS: before 11.2 (fixed in 11.2)

Published 2025-01-27. Last modified 2026-06-17.