Apple Products Password Autofill Authentication Bypass Vulnerability

A vulnerability exists in multiple Apple products, including macOS Sequoia 15.2, watchOS 11.2, visionOS 2.2, iOS 18.2, and iPadOS 18.2. This vulnerability allows the password autofill feature to incorrectly fill in passwords after a failed authentication attempt. The issue arises from a logic flaw in how password autofill handles authentication states, potentially leading to unauthorized access to sensitive accounts or information.

Impact

Exploitation of this vulnerability could result in unauthorized access to accounts or services by allowing passwords to be filled in incorrectly after a failed authentication, bypassing normal security checks.