3622 matches found
CVE-2024-54493
CVE-2024-54493 corresponds to a privacy-indicator issue for microphone access in macOS prior to 15.2, resolved by improved state management. The affected product is macOS Sequoia, with the fix released in Sequoia 15.2. The root cause is described as incorrect attribution of microphone-access indi...
CVE-2024-54493
This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.2. Privacy indicators for microphone access may be attributed incorrectly...
CVE-2024-44248
This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. A user with screen sharing access may be able to view another user's screen...
CVE-2024-44248
This CVE concerns Apple macOS Screen Sharing Server. The affected software is macOS Ventura and Sonoma (fixed in Ventura 13.7.2 and Sonoma 14.7.2). The underlying issue stems from state management allowing a user with screen sharing access to view another user’s screen. The NVD entry flags a Conf...
CVE-2024-44248
This issue was addressed through improved state management. This issue is fixed in macOS Ventura 13.7.2, macOS Sonoma 14.7.2. A user with screen sharing access may be able to view another user's screen...
CVE-2024-44212
A cookie management issue was addressed with improved state management. This issue is fixed in Safari 18.1, visionOS 2.1, tvOS 18.1, iOS 18.1 and iPadOS 18.1, watchOS 11.1. Cookies belonging to one origin may be sent to another origin...
CVE-2024-44212
CVE-2024-44212 is a WebKit cookie management vulnerability affecting Safari/WebKit on Apple platforms. The issue allows cookies belonging to one origin to be sent to another origin due to flawed state management. It is fixed in Safari 18.1 and OS updates: visionOS 2.1, tvOS 18.1, iOS 18.1, iPadOS...
CVE-2024-54465
CVE-2024-54465 is a logic issue addressed by macOS Sequoia 15.2; an app may be able to elevate privileges. The vulnerability is fixed in Sequoia 15.2; CVSS 3.1 indicates high impact. Remediation: update to macOS Sequoia 15.2 (and linked advisories corroborate fix). Exploitation details are not pr...
CVE-2024-54465
A logic issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.2. An app may be able to elevate privileges...
PT-2025-3051
Name of the Vulnerable Software and Affected Versions: Safari versions prior to 18.2 macOS Sequoia versions prior to 15.2 watchOS versions prior to 11.2 iOS versions prior to 18.2 iPadOS versions prior to 18.2 Description: The issue is related to incorrect authorization in the State Management...
PT-2024-36343 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7.2 macOS versions prior to 14.7.2 macOS versions prior to 15.2 Description: An authorization issue was addressed with improved state management. This issue allows a different user to access an encrypted volume...
Apple Safari 18.1 Multiple Vulnerabilities (121571)
The version of Apple Safari installed on the remote host is prior to 18.1. It is, therefore, affected by multiple vulnerabilities as referenced in the 121571 advisory. - An information leakage was addressed with additional validation. This issue is fixed in visionOS 2.1, iOS 18.1 and iPadOS 18.1,...
About the security content of visionOS2.1.1
About the security content of visionOS2.1.1 This document describes the security content of visionOS 2.1.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...
Linux SCSI DoS
The vulnerability of the SCSI component in the Linux operating system is related to errors in the state management function called storestatefield. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2024-44145
This issue was addressed through improved state management. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An attacker with physical access to a macOS device with Sidecar enabled may be able to bypass the Lock Screen...
CVE-2024-44145
This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15, iOS 18 and iPadOS 18. An attacker with physical access to a macOS device with Sidecar enabled may be able to bypass the Lock Screen...
CVE-2024-44263
A logic issue was addressed with improved state management. This issue is fixed in iOS 18.1 and iPadOS 18.1. An app may be able to access user-sensitive data...
CVE-2024-44263
A logic issue was addressed with improved state management. This issue is fixed in iOS 18.1 and iPadOS 18.1. An app may be able to access user-sensitive data...
CVE-2024-44259
This issue was addressed through improved state management. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, visionOS 2.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, Safari 18.1. An attacker may be able to misuse a trust relationship to download malicious content...