CVE-2024-23235

A race condition was addressed with additional validation. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, watchOS 10.4. An app may be able to access user-sensitive data...

CVE-2024-23235

CVE-2024-23235 is a kernel race condition addressed by Apple with additional validation. It is fixed in macOS Sonoma 14.4, visionOS 1.1, iOS 17.4/iPadOS 17.4, watchOS 10.4, and iOS 16.7.6/iPadOS 16.7.6 and tvOS 17.4. The affected impact is that an app may be able to access user-sensitive data. Th...

CVE-2024-23290

CVE-2024-23290 is a logic issue fixed by platform updates: tvOS 17.4, iOS 17.4, and iPadOS 17.4; macOS Sonoma 14.4; watchOS 10.4. The issue could allow an app to access user‑sensitive data due to improved restrictions. No exploitation details are provided beyond the remediation versions.

CVE-2024-23290

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS 10.4. An app may be able to access user-sensitive data...

CVE-2024-23287

A privacy issue was addressed with improved handling of temporary files. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, watchOS 10.4. An app may be able to access user-sensitive data...

CVE-2024-23287

CVE-2024-23287 concerns a privacy issue in Apple platforms where improved handling of temporary files fixes a vulnerability that could allow an app to access user-sensitive data. Affected products/versions (per provided documents): macOS Sonoma 14.4, iOS 17.4, iPadOS 17.4, watchOS 10.4. The entry...

CVE-2024-23205

CVE-2024-23205 describes a privacy issue in Apple platforms where an app may be able to access sensitive user data due to insufficient private data redaction in log entries. The vulnerability is fixed in macOS Sonoma 14.4, iOS 17.4, and iPadOS 17.4. Affected components are tied to log handling, w...

CVE-2024-23230

This issue was addressed with improved file handling. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app may be able to access sensitive user data...

CVE-2023-28826

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, macOS Monterey 12.7.4, macOS Sonoma 14.1, macOS Ventura 13.6.5. An app may be able to access sensitive user data...

CVE-2024-23260

CVE-2024-23260 affects macOS Sonoma before 14.4; root cause: removal of additional entitlements reduces access to user-sensitive data. Fixed in macOS Sonoma 14.4; impact: an app may be able to access user-sensitive data. No exploits detailed in provided sources.

CVE-2024-23260

This issue was addressed by removing additional entitlements. This issue is fixed in macOS Sonoma 14.4. An app may be able to access user-sensitive data...

CVE-2024-23260

This issue was addressed by removing additional entitlements. This issue is fixed in macOS Sonoma 14.4. An app may be able to access user-sensitive data...

Vulnerabilities fixed in Apple macOS

Apple has fixed vulnerabilities in macOS. A malicious party could exploit the vulnerabilities to launch attacks that can lead to the following categories of damage: Circumvention of security measure. Remote code execution Administrator/Root rights Remote code execution User rights Access to...

Vulnerabilities fixed in Apple Safari

Apple has fixed vulnerabilities in Safari. The vulnerabilities allow a malicious person to launch attacks that lead to the following categories of damage: Circumvention of security measure. Accessing sensitive data Denial-of-Service DoS. Successful abuse requires the malicious party to trick the...

PT-2024-22112

Name of the Vulnerable Software and Affected Versions macOS versions prior to 14.4 Description A path handling issue was addressed with improved validation, which may allow an app to access user-sensitive data. Recommendations For versions prior to 14.4, update to macOS Sonoma 14.4 to resolve the...

Apple macOS Monterey Security Vulnerability

Apple macOS Monterey is the 18th major release of Apple's macOS for the Macintosh desktop operating system. A security vulnerability exists in Apple macOS Monterey versions prior to 12.7.4, which stems from an attacker's ability to access sensitive user data...

Apple macOS Sonoma Security Vulnerability

Apple macOS Sonoma is a desktop operating system from Apple Inc. in the United States. A security vulnerability exists in Apple macOS Sonoma version 14.4, which stems from an application that may be able to access sensitive user data...

PT-2024-19755 · Apple · Macos Sonoma +1

Name of the Vulnerable Software and Affected Versions: macOS Sonoma versions prior to 14.4 Description: The issue allows an app to potentially access user-sensitive data. This was addressed by removing additional entitlements. Recommendations: For versions prior to 14.4, update to macOS Sonoma 14...

PT-2024-20374 · Jfinalcms · Jfinalcms

Name of the Vulnerable Software and Affected Versions: Jfinalcms version 5.0.0 Description: A SQL injection issue allows a remote attacker to obtain sensitive information. The issue is related to the /admin/admin API endpoint, specifically the name parameter. Recommendations: For Jfinalcms versio...

PT-2024-19780 · Apple · Macos Sonoma +4

Name of the Vulnerable Software and Affected Versions: macOS Sonoma versions prior to 14.4 iOS versions prior to 17.4 iPadOS versions prior to 17.4 watchOS versions prior to 10.4 Description: A privacy issue was addressed with improved handling of temporary files. This issue may allow an app to...