1790 matches found
CVE-2023-42893
CVE-2023-42893 is a permissions issue on Apple platforms that could allow an app to access protected user data. The root cause involved vulnerable code and insufficient checks, which Apple fixed by removing the vulnerable code and adding additional checks. Affected and fixed versions (per provide...
CVE-2023-42893
A permissions issue was addressed by removing vulnerable code and adding additional checks. This issue is fixed in macOS Monterey 12.7.2, macOS Ventura 13.6.3, iOS 17.2 and iPadOS 17.2, iOS 16.7.3 and iPadOS 16.7.3, tvOS 17.2, watchOS 10.2, macOS Sonoma 14.2. An app may be able to access protecte...
CVE-2023-42893
A permissions issue was addressed by removing vulnerable code and adding additional checks. This issue is fixed in macOS Monterey 12.7.2, macOS Ventura 13.6.3, iOS 17.2 and iPadOS 17.2, iOS 16.7.3 and iPadOS 16.7.3, tvOS 17.2, watchOS 10.2, macOS Sonoma 14.2. An app may be able to access protecte...
CVE-2024-29200 API returns timesheet entries a user should not be authorized to view
Kimai is a web-based multi-user time-tracking application. The permission viewothertimesheet performs differently for the Kimai UI and the API, thus returning unexpected data through the API. When setting the viewothertimesheet permission to true, on the frontend, users can only see timesheet...
CVE-2024-23295
A permissions issue was addressed to help ensure Personas are always protected This issue is fixed in visionOS 1.1. An unauthenticated user may be able to use an unprotected Persona...
CVE-2024-23253
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.4. An app may be able to access a user's Photos Library...
CVE-2024-23253
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.4. An app may be able to access a user's Photos Library...
CVE-2024-23201
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Monterey 12.7.4, watchOS 10.3, tvOS 17.3, macOS Ventura 13.6.5, iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3. An app may be able to cause a denial-of-service...
Code injection
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.4. An app may be able to access a user's Photos Library...
Code injection
A permissions issue was addressed to help ensure Personas are always protected This issue is fixed in visionOS 1.1. An unauthenticated user may be able to use an unprotected Persona...
CVE-2024-23253
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.4. An app may be able to access a user's Photos Library...
CVE-2024-23253
CVE-2024-23253 affects macOS Sonoma 14.4. A permissions issue could allow an app to access a user’s Photos Library. Root cause: inadequate access restrictions for Photos Library handling. Status: fixed in macOS Sonoma 14.4. Public references in the provided documents include the NVD entry (descri...
CVE-2024-23201
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 17.3 and iPadOS 17.3, macOS Monterey 12.7.4, macOS Sonoma 14.3, macOS Ventura 13.6.5, tvOS 17.3, watchOS 10.3. An app may be able to cause a denial-of-service...
CVE-2024-23295
A permissions issue was addressed to help ensure Personas are always protected. This issue is fixed in visionOS 1.1. An unauthenticated user may be able to use an unprotected Persona...
CVE-2024-23295
A permissions issue was addressed to help ensure Personas are always protected. This issue is fixed in visionOS 1.1. An unauthenticated user may be able to use an unprotected Persona...
CVE-2024-23295
The CVE-2024-23295 entry affects Apple visionOS (Apple Vision Pro) with a permissions issue that could allow an unauthenticated user to use an unprotected Persona. The issue is addressed in visionOS 1.1; upgrading to visionOS 1.1 is the documented remediation. The available sources confirm the vu...
PT-2024-19748 · Apple · Macos Sonoma +1
Name of the Vulnerable Software and Affected Versions: macOS Sonoma versions prior to 14.4 Description: A permissions issue was addressed with additional restrictions. This issue may allow an app to access a user's Photos Library. Recommendations: For macOS Sonoma versions prior to 14.4, update t...
PT-2024-22113 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14.4 Description: A permissions issue was addressed by removing vulnerable code and adding additional checks. This issue may allow an app to modify protected parts of the file system. Recommendations: For versions prio...
macOS 13.x < 13.6.5 Multiple Vulnerabilities (HT214085)
The remote host is running a version of macOS / Mac OS X that is 13.x prior to 13.6.5. It is, therefore, affected by multiple vulnerabilities: - This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, macOS Monterey 12.7.4,...