Apple Password Autofill Authentication Bypass Vulnerability

A vulnerability exists in the Password Autofill feature of Apple iOS, iPadOS, visionOS, and macOS Sequoia. This vulnerability allows the autofill feature to incorrectly fill in passwords after a failed authentication attempt. The issue arises from inadequate state management, which has been improved in the latest versions of these operating systems.

Impact

Exploitation of this vulnerability could lead to unauthorized password autofill, potentially allowing users to bypass authentication requirements in apps or services.

Remediation

Users can update to iOS 18.4, iPadOS 18.4, visionOS 2.4, or macOS Sequoia 15.4 to address this vulnerability.