PT-2024-22082

Name of the Vulnerable Software and Affected Versions Safari versions prior to 17.5 tvOS versions prior to 17.5 visionOS versions prior to 1.2 iOS versions prior to 17.5 iPadOS versions prior to 17.5 watchOS versions prior to 10.5 macOS Sonoma versions prior to 14.5 Description The issue was...

PT-2025-2396

Name of the Vulnerable Software and Affected Versions: macOS Sonoma versions prior to 14.5 iOS versions prior to 16.7.8 and prior to 17.5 iPadOS versions prior to 16.7.8 and prior to 17.5 Safari versions prior to 17.5 watchOS versions prior to 10.5 tvOS versions prior to 17.5 visionOS versions...

PT-2024-4843 · Apple · Macos Sonoma +4

Name of the Vulnerable Software and Affected Versions: visionOS versions prior to 1.2 macOS Sonoma versions prior to 14.5 iOS versions prior to 17.5 iPadOS versions prior to 17.5 Description: The issue is related to the ImageIO component and is caused by a buffer overflow when processing a...

PT-2024-22063 · Apple · Ipados +5

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.6.8 macOS Sonoma versions prior to 14.5 macOS Monterey versions prior to 12.7.6 watchOS versions prior to 10.5 visionOS versions prior to 1.3 tvOS versions prior to 17.5 iOS versions prior to 17.5 iPadOS versions...

Ubuntu 22.04 LTS / 23.10 : WebKitGTK vulnerabilities (USN-6732-1)

The remote Ubuntu 22.04 LTS / 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6732-1 advisory. Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a...

SUSE SLED15: WebKitGTK-4.0-lang / WebKitGTK-4.1-lang / WebKitGTK-6.0-lang / etc (SUSE-SU-2024:1270-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1270-1 advisory. - CVE-2024-23252: Fixed denial of service via crafted web content bsc1222010. - CVE-2024-23254:...

Apple Security Update: visionOS 1.1.2

Apple recommends to install security update visionOS 1.1.2 on devices Apple Vision Pro...

Apple Security Update: visionOS 1.1.2

Apple recommends to install security update visionOS 1.1.2 on devices Apple Vision Pro...

The vulnerability of the operating system kernels in iPadOS, tvOS, iOS, watchOS, macOS, visionOS allows a perpetrator to execute arbitrary code.

The vulnerability of the operating system kernels, including iPadOS, tvOS, iOS, watchOS, macOS, and visionOS, relates to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Fedora 38 : webkitgtk (2024-f1ae7b7ac5)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-f1ae7b7ac5 advisory. Upgrade to 2.44.0: Make the DOM accessibility tree reachable from UI process with GTK4. Removed the X11 and WPE renderers in favor of DMA-BUF...

About the security content of visionOS 1.1.1

About the security content of visionOS 1.1.1 This document describes the security content of visionOS 1.1.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

Apple Security Update: visionOS 1.1.1Details coming soon

Apple recommends to install security update visionOS 1.1.1Details coming soon on devices Apple Vision Pro...

About the security content of visionOS 1.1.1

About the security content of visionOS 1.1.1 This document describes the security content of visionOS 1.1.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

Apple Released Security Updates for Multiple Products

Apple released security updates to address vulnerabilities in Safari, macOS, watchOS, tvOS, and visionOS. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following advisories and apply t...

CVE-2024-23295

A permissions issue was addressed to help ensure Personas are always protected This issue is fixed in visionOS 1.1. An unauthenticated user may be able to use an unprotected Persona...

CVE-2024-23295

A permissions issue was addressed to help ensure Personas are always protected. This issue is fixed in visionOS 1.1. An unauthenticated user may be able to use an unprotected Persona...

CVE-2024-23286

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.7.4, macOS Ventura 13.6.5, macOS Sonoma 14.4, visionOS 1.1, iOS 17.4 and iPadOS 17.4, watchOS 10.4, iOS 16.7.6 and iPadOS 16.7.6, tvOS 17.4. Processing an image may lead to arbitrary code...

CVE-2024-23263

A logic issue was addressed with improved validation. This issue is fixed in Safari 17.4, iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, watchOS 10.4. Processing maliciously crafted web content may prevent Content Security Policy from being...

CVE-2024-23254

The issue was addressed with improved UI handling. This issue is fixed in Safari 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, watchOS 10.4. A malicious website may exfiltrate audio data cross-origin...

CVE-2024-23246

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, watchOS 10.4. An app may be able to break out of its sandbox...