238 matches found
CVE-2024-40860
A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7. An app may be able to modify protected parts of the file system...
CVE-2024-40801
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.7, macOS Sequoia 15. An app may be able to access protected user data...
CVE-2024-27876
A race condition was addressed with improved locking. This issue is fixed in macOS Ventura 13.7, iOS 17.7 and iPadOS 17.7, visionOS 2, iOS 18 and iPadOS 18, macOS Sonoma 14.7, macOS Sequoia 15. Unpacking a maliciously crafted archive may allow an attacker to write arbitrary files...
CVE-2024-40844
A privacy issue was addressed with improved handling of temporary files. This issue is fixed in iOS 17.7 and iPadOS 17.7, macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. An app may be able to observe data displayed to the user by Shortcuts...
CVE-2024-40844
CVE-2024-40844 describes a privacy issue where an app may observe data displayed to the user by Shortcuts due to improved handling of temporary files. The issue affects Apple platforms and is fixed in iOS 17.7, iPadOS 17.7, macOS Ventura 13.7, macOS Sonoma 14.7, and macOS Sequoia 15. The underlyi...
CVE-2024-44169
CVE-2024-44169 – Apple OS memory handling issue impacted Apple operating systems (macOS, iOS, iPadOS, visionOS, watchOS, tvOS, macOS Sequoia/Sonoma). The issue is described as caused by memory handling that could allow an app to cause an unexpected system termination. Affected versions include ma...
CVE-2024-44168
A library injection issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. An app may be able to modify protected parts of the file system...
CVE-2024-40845
CVE-2024-40845 affects Apple macOS through an AppleGraphicsControl memory handling issue that can cause an application to terminate when processing a maliciously crafted video file. The public description specifies a fix in macOS Sonoma 14.7 and macOS Sequoia 15. The CVE is rated with LOCAL attac...
CVE-2024-40845
The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.7, macOS Sequoia 15. Processing a maliciously crafted video file may lead to unexpected app termination...
CVE-2024-44164
This issue was addressed with improved checks. This issue is fixed in iOS 17.7 and iPadOS 17.7, macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. An app may be able to bypass Privacy preferences...
CVE-2024-44135
This CVE (CVE-2024-44135) concerns a permissions issue in macOS that could allow an app to access protected files inside an App Sandbox container. The vulnerability is fixed in macOS Sonoma 14.7 and macOS Sequoia 15; the underlying cause relates to insufficient permission restrictions, and the is...
CVE-2024-44135
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7. An app may be able to access protected files within an App Sandbox container...
CVE-2024-27876
A race condition was addressed with improved locking. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7, visionOS 2. Unpacking a maliciously crafted archive may allow an attacker to write arbitrary files...
CVE-2024-27876
A race condition was addressed with improved locking. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7, visionOS 2. Unpacking a maliciously crafted archive may allow an attacker to write arbitrary files...
CVE-2024-27876
CVE-2024-27876 describes a race condition in Apple’s archive unpacking that could allow writing arbitrary files when a malicious archive is unpacked. The issue is addressed by improved locking and is fixed in: macOS Ventura 13.7; macOS Sonoma 14.7; macOS Sequoia 15; iOS 17.7 and iPadOS 17.7; iOS ...
CVE-2024-44158
This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 17.7 and iPadOS 17.7, macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. A shortcut may output sensitive user data without consent...
CVE-2024-40801
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7. An app may be able to access protected user data...
CVE-2024-27880
CVE-2024-27880 is an out-of-bounds read vulnerability affecting Apple platforms. Processing a maliciously crafted file may cause an application to terminate unexpectedly. It is fixed in: iOS 17.7 and iPadOS 17.7, visionOS 2, watchOS 11, macOS Sequoia 15, iOS 18 and iPadOS 18, macOS Sonoma 14.7, a...
CVE-2024-27880
An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7, tvOS 18, visionOS 2, watchOS 11. Processing a maliciously crafted file may lead to unexpected app termination...