CVE-2024-54530 is a vulnerability affecting Apple iOS and iPadOS password autofill functionality, where passwords may be autofilled despite failed authentication attempts. This flaw could lead to unauthorized disclosure of stored passwords. The issue is classified under CWE-863 (Incorrect Authorization). Apple has fixed this vulnerability by implementing improved authentication checks in iOS 18.2 and related OS versions. The CVSS v3.1 base score is 9.1, reflecting critical impact on confidentiality and integrity without requiring user interaction or privileges.

Successful exploitation of this vulnerability could allow an attacker to obtain autofilled passwords without proper authentication, leading to compromise of user credentials and potential unauthorized access to user accounts. The confidentiality and integrity of stored passwords are impacted. There is no impact on availability. No known exploits are reported in the wild.

Apple has released official fixes in iOS 18.2, iPadOS 18.2, macOS Sequoia 15.2, visionOS 2.2, and watchOS 11.2. Users and administrators should apply these updates promptly to remediate the vulnerability. No additional mitigation is indicated by the vendor advisory.