CVE-2024-23245

This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. Third-party shortcuts may use a legacy action from Automator to send events to apps without user consent...

CVE-2024-23245

This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. Third-party shortcuts may use a legacy action from Automator to send events to apps without user consent...

CVE-2024-23286

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5, tvOS 17.4, visionOS 1.1, watchOS 10.4. Processing an image may lead to arbitrary code...

CVE-2024-23286

CVE-2024-23286 concerns a buffer overflow fix tied to memory handling in Apple platforms. Affected components/versions (as stated): macOS Monterey 12.7.4; macOS Ventura 13.6.5; macOS Sonoma 14.4; visionOS 1.1; iOS 17.4 and iPadOS 17.4; watchOS 10.4; iOS 16.7.6 and iPadOS 16.7.6; tvOS 17.4. Underl...

CVE-2024-23269

A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app may be able to modify protected parts of the file system...

CVE-2024-23269

A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app may be able to modify protected parts of the file system...

CVE-2024-23265

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5, tvOS 17.4, visionOS 1.1, watchOS 10.4. An app may be able to cause unexpected syste...

CVE-2024-23272

CVE-2024-23272 involves a logic issue fixed by improved checks. Affected macOS versions include Sonoma 14.4, Monterey 12.7.4, and Ventura 13.6.5. The issue could allow a user to gain access to protected parts of the file system. Remediation per sources is upgrading to the listed fixed versions. I...

CVE-2024-23272

A logic issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An attacker may gain access to protected parts of the file system...

CVE-2024-23272

A logic issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An attacker may gain access to protected parts of the file system...

CVE-2024-23268

An injection issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app may be able to elevate privileges...

CVE-2024-23268

CVE-2024-23268 is an injection issue that (per the NVD entry) was addressed by input validation improvements and is fixed in macOS Sonoma 14.4, macOS Monterey 12.7.4, and macOS Ventura 13.6.5. The vulnerability could allow an app to elevate privileges. Affected software is macOS on the listed ver...

CVE-2024-23244

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4. An app from a standard user account may be able to escalate privilege after admin user login...

CVE-2024-23244

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4. An app from a standard user account may be able to escalate privilege after admin user login...

CVE-2024-23244

CVE-2024-23244 is a logic‑level vulnerability in macOS that was fixed by Apple in macOS Monterey 12.7.4 and macOS Sonoma 14.4. The issue could allow an app running under a standard user account to escalate privileges after an admin user logs in due to improved restrictions in the affected compone...

CVE-2024-23247

CVE-2024-23247 affects macOS: a memory-handling issue where processing a file can lead to unexpected app termination or arbitrary code execution. It is fixed in macOS Sonoma 14.4, macOS Monterey 12.7.4, and macOS Ventura 13.6.5. "Memory handling" is the root cause as described; no exploitation de...

CVE-2024-23267

CVE-2024-23267 affects macOS where an app may bypass certain Privacy preferences. The connected sources (NVD/Red Hat/Apple advisories) indicate the fixed versions are macOS Sonoma 14.4, macOS Monterey 12.7.4, and macOS Ventura 13.6.5, addressing the issue via improved checks. The vulnerability im...

CVE-2024-23267

The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app may be able to bypass certain Privacy preferences...

CVE-2024-23230

This issue was addressed with improved file handling. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app may be able to access sensitive user data...

CVE-2024-23230

CVE-2024-23230 affects macOS (Sonoma 14.4, Monterey 12.7.4, Ventura 13.6.5). The vulnerability is due to improper file handling, allowing an app to access sensitive user data. Fixes are included in the listed macOS releases: Sonoma 14.4, Monterey 12.7.4, Ventura 13.6.5. No exploitation details ar...