CVE-2024-44255

A path handling issue was addressed with improved logic. This issue is fixed in visionOS 2.1, iOS 18.1 and iPadOS 18.1, macOS Ventura 13.7.1, macOS Sonoma 14.7.1, watchOS 11.1, tvOS 18.1. A malicious app may be able to run arbitrary shortcuts without user consent...

CVE-2024-44123

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. A malicious app with root privileges may be able to access keyboard input and location information without user consent...

CVE-2024-44123

CVE-2024-44123 is a permissions-related issue affecting macOS Sequoia 15, iOS 18 and iPadOS 18. A malicious app with root privileges may access keyboard input and location information without user consent. The vulnerability is addressed in the specified OS updates (macOS Sequoia 15, iOS 18, iPadO...

CVE-2024-44123

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15, iOS 18 and iPadOS 18. A malicious app with root privileges may be able to access keyboard input and location information without user consent...

CVE-2024-44255

CVE-2024-44255 is a path handling issue addressed by Apple in versions listed as fixed: visionOS 2.1, iOS 18.1 / iPadOS 18.1, macOS Ventura 13.7.1, macOS Sonoma 14.7.1, watchOS 11.1, and tvOS 18.1. The issue allowed a malicious app to run arbitrary shortcuts without user consent due to improved p...

CVE-2024-44255

A path handling issue was addressed with improved logic. This issue is fixed in visionOS 2.1, iOS 18.1 and iPadOS 18.1, macOS Ventura 13.7.1, macOS Sonoma 14.7.1, watchOS 11.1, tvOS 18.1. A malicious app may be able to run arbitrary shortcuts without user consent...

PT-2024-41823

Name of the Vulnerable Software and Affected Versions macOS versions prior to 15.1 Description A permissions issue allowed an application to access Contacts without user consent. This was addressed with additional restrictions. Recommendations Update to macOS version 15.1 or later...

Mozilla Faces Privacy Complaint for Enabling Tracking in Firefox Without User Consent

Vienna-based privacy non-profit noyb short for None Of Your Business has filed a complaint with the Austrian data protection authority DPA against Firefox maker Mozilla for enabling a new feature called Privacy-Preserving Attribution PPA without explicitly seeking users' consent. "Contrary to its...

Meta to Train AI Models Using Public U.K. Facebook and Instagram Posts

Meta has announced that it will begin training its artificial intelligence AI systems using public content shared by adult users across Facebook and Instagram in the U.K. in the coming months. "This means that our generative AI models will reflect British culture, history, and idiom, and that U.K...

CVE-2024-44128

This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. An Automator Quick Action workflow may be able to bypass Gatekeeper...

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS version 15, which originates from a logical issue that could cause a process to capture screen content without the user's consent...

CVE-2024-44128

This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. An Automator Quick Action workflow may be able to bypass Gatekeeper...

CVE-2024-44189

CVE-2024-44189 affects macOS WindowServer and relates to a logic issue where a process could capture screen contents without user consent. The public records indicate this was addressed with improved checks and that macOS Sequoia 15 includes the fix. The Red Hat and Apple advisories corroborate t...

PT-2024-31022 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Sequoia 15 Description: A logic issue existed where a process may be able to capture screen contents without user consent. The issue was addressed with improved checks. Recommendations: For versions prior to macOS...

PT-2024-30973 · Apple · Ios +3

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 18 iPadOS versions prior to 18 macOS Sequoia versions prior to 15 Description: This issue was addressed with improved validation of symlinks, allowing unauthorized apps to access sensitive user data, including Health...

U.S. Dept Of Defense: CSRF leads to Account takeover

The target website was found vulnerable to CSRF, allowing an attacker to perform actions on the user's behalf without their knowledge or consent. The vulnerable endpoint was identified at https://██████/account/profile/edit, where the user's profile information could be modified. A POC was...

CVE-2024-40834

This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. A shortcut may be able to bypass sensitive Shortcuts app settings...

CVE-2024-40787

This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Ventura 13.6.8, macOS Monterey 12.7.6, iOS 17.6 and iPadOS 17.6, watchOS 10.6, macOS Sonoma 14.6. A shortcut may be able to bypass Internet permission requirements...

CVE-2024-40787

This issue was addressed by adding an additional prompt for user consent. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8, watchOS 10.6. A shortcut may be able to bypass Internet permission requirements...

CVE-2024-40834

CVE-2024-40834 affects macOS where a shortcut may bypass sensitive Shortcuts app settings. The issue is addressed by adding an extra user-consent prompt and is fixed in macOS Sonoma 14.6, macOS Monterey 12.7.6, and macOS Ventura 13.6.8. For context, the initial documentation lists these patch lev...