3359 matches found
CVE-2024-40774
A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8, tvOS 17.6, watchOS 10.6. An app may be able to bypass Privacy preferences...
CVE-2024-40774
CVE-2024-40774 is a downgrade issue addressed by stricter code-signing restrictions. Affected platforms include macOS Ventura 13.6.8, Monterey 12.7.6, iOS 17.6/iPadOS 17.6, watchOS 10.6, tvOS 17.6, and macOS Sonoma 14.6; the flaw could allow an app to bypass Privacy preferences. Remediation is th...
CVE-2024-40774
A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8, tvOS 17.6, watchOS 10.6. An app may be able to bypass Privacy preferences...
CVE-2023-40398
This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.6.4, macOS Big Sur 11.7.5, macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4. A sandboxed process may be able to circumvent sandbox restrictions...
CVE-2023-40398
CVE-2023-40398 affects Apple macOS and iOS, with a sandbox bypass vector in a sandboxed process. The issue is fixed in macOS Monterey 12.6.4, Big Sur 11.7.5, Ventura 13.3, and iOS/iPadOS 16.4; Apple KBs HT213670/HT213677/HT213676/HT213675 document the patches. CVSS: 3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:...
CVE-2023-40398
This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.6.4, macOS Big Sur 11.7.5, macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4. A sandboxed process may be able to circumvent sandbox restrictions...
Apple macOS 安全漏洞
Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS Monterey prior to version 12.7.6, which stems from an application that may be able to modify protected portions of the file system...
Apple macOS 安全漏洞
Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS Monterey versions prior to 12.7.6, which originates from a vulnerability that could cause an attacker to unexpectedly terminate an...
Apple macOS 安全漏洞
Apple macOS is a suite of specialized operating systems developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Monterey prior to version 12.7.6, which stems from a shortcut that may be able to use sensitive data without prompting the user through certain actions...
Apple macOS 安全漏洞
Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS Monterey prior to version 12.7.6, which originates from a local attacker who may cause the system to shut down unexpectedly...
PT-2024-29057 · Apple · Macos Monterey +8
Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.7.9 iPadOS versions prior to 16.7.9 macOS Ventura versions prior to 13.6.8 macOS Monterey versions prior to 12.7.6 iOS versions prior to 17.6 iPadOS versions prior to 17.6 watchOS versions prior to 10.6 tvOS versions...
PT-2024-22106 · Apple · Macos Monterey +3
Name of the Vulnerable Software and Affected Versions: macOS Sonoma versions prior to 14.6 macOS Monterey versions prior to 12.7.6 macOS Ventura versions prior to 13.6.8 Description: A privacy issue was addressed with improved private data redaction for log entries. An app may be able to access...
PT-2024-29065 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.7.6 macOS versions prior to 13.6.8 macOS versions prior to 14.6 Description: A logic issue was addressed with improved checks. The issue allows a shortcut to potentially use sensitive data with certain actions witho...
PT-2024-29061 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.7.6 macOS versions prior to 13.6.8 macOS versions prior to 14.6 Description: A type confusion issue was addressed with improved checks, which may allow an attacker to cause unexpected app termination. Recommendation...
PT-2024-29060 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.7.6 macOS versions prior to 13.6.8 macOS versions prior to 14.6 Description: The issue allows a local attacker to potentially elevate their privileges. It was addressed with improved checks. Recommendations: For mac...
PT-2024-29058 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.7.6 macOS versions prior to 13.6.8 macOS versions prior to 14.6 Description: An input validation issue was addressed with improved input validation, which may allow an app to modify protected parts of the file syste...
Apple macOS 安全漏洞
Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability previously existed in Apple macOS Monterey version 12.7.6, which stems from an application that may be able to access sensitive user data...
PT-2024-29077 · Apple · Macos Sonoma +3
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14.6 macOS Monterey versions prior to 12.7.6 macOS Ventura versions prior to 13.6.8 Description: An access issue was addressed with additional sandbox restrictions. The issue may cause third-party app extensions to not...
Apple macOS 安全漏洞
Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS Monterey versions prior to 12.7.6, which stems from an application that may be able to overwrite arbitrary files...
Apple macOS 安全漏洞
Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS Monterey versions prior to 12.7.6 that stems from a third-party application extension that may not be properly sandboxed...