CVE-2024-23277

CVE-2024-23277 concerns macOS Sonoma 14.4, iOS 17.4, and iPadOS 17.4. The vulnerability allows an attacker on a privileged network position to inject keystrokes by spoofing a keyboard. Apple’s security content indicates this issue is addressed in the 14.4/17.4 updates. The root cause is tied to k...

CVE-2024-23241

This issue was addressed through improved state management. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4. An app may be able to leak sensitive user information...

CVE-2024-23241

CVE-2024-23241 affects Apple platforms and is an information disclosure issue addressed by Apple in a coordinated update. The NVD entry states improved state management fixes the vulnerability, with the fix shipping in macOS Sonoma 14.4 and iOS/tvOS/iPadOS 17.4. The vulnerability could allow an a...

CVE-2024-23201

CVE-2024-23201 is an Apple macOS/iOS vulnerability described as a permissions issue that, if exploited by an app, could cause a denial-of-service. The issue is fixed in macOS Monterey 12.7.4, macOS Ventura 13.6.5, macOS Sonoma 14.3, watchOS 10.3, tvOS 17.3, iOS 17.3, and iPadOS 17.3. Related docu...

CVE-2024-23201

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 17.3 and iPadOS 17.3, macOS Monterey 12.7.4, macOS Sonoma 14.3, macOS Ventura 13.6.5, tvOS 17.3, watchOS 10.3. An app may be able to cause a denial-of-service...

CVE-2024-23201

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 17.3 and iPadOS 17.3, macOS Monterey 12.7.4, macOS Sonoma 14.3, macOS Ventura 13.6.5, tvOS 17.3, watchOS 10.3. An app may be able to cause a denial-of-service...

CVE-2024-23240

The issue was addressed with improved checks. This issue is fixed in iOS 17.4 and iPadOS 17.4. Shake-to-undo may allow a deleted photo to be re-surfaced without authentication...

CVE-2024-23240

CVE-2024-23240 affects Apple iOS/iPadOS via the Photos feature, where the shake-to-undo workflow could re-surface a deleted photo without authentication. The issue is addressed in iOS 17.4 and iPadOS 17.4 with updated checks. If you rely on this CVE data, apply the 17.4 updates to mitigate. The c...

CVE-2024-23283

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app may be able to access user-sensitive data...

CVE-2024-23283

CVE-2024-23283 describes a privacy issue where private data was not properly redacted in log entries. The NVD entry states the issue is fixed in iOS 16.7.6, iPadOS 16.7.6, macOS Monterey 12.7.4, macOS Sonoma 14.4, and macOS Ventura 13.6.5, addressing a potential exposure of user‑sensitive data. T...

CVE-2024-23226

The issue was addressed with improved memory handling. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, watchOS 10.4. Processing web content may lead to arbitrary code execution...

Apple Releases Security Updates for iOS and iPadOS

Apple released security updates to address vulnerabilities in iOS and iPadOS. A cyber threat actor could exploit one of these vulnerabilities to obtain sensitive information. CISA encourages users and administrators to review the following security releases and apply the necessary updates: iOS 17...

PT-2024-2162 · Apple · Macos Sonoma +7

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.7.4 macOS Ventura versions prior to 13.6.5 macOS Sonoma versions prior to 14.4 visionOS versions prior to 1.1 iOS versions prior to 17.4 iPadOS versions prior to 17.4 watchOS versions prior to 10.4 iOS versions prio...

PT-2024-19757 · Apple · Visionos +2

Name of the Vulnerable Software and Affected Versions: visionOS versions prior to 1.1 iOS versions prior to 17.4 iOS versions prior to 16.7.6 iPadOS versions prior to 17.4 iPadOS versions prior to 16.7.6 Description: An app may be able to spoof system notifications and UI. This issue was addresse...

PT-2024-19780 · Apple · Macos Sonoma +4

Name of the Vulnerable Software and Affected Versions: macOS Sonoma versions prior to 14.4 iOS versions prior to 17.4 iPadOS versions prior to 17.4 watchOS versions prior to 10.4 Description: A privacy issue was addressed with improved handling of temporary files. This issue may allow an app to...

PT-2024-19759

Name of the Vulnerable Software and Affected Versions macOS versions 12.7.4 through 14.4 visionOS version 1.1 iOS versions 16.7.6, 17.4 iPadOS versions 16.7.6, 17.4 watchOS version 10.4 tvOS version 17.4 Description A memory corruption issue was addressed through improved locking mechanisms. The...

PT-2024-19737 · Apple · Macos Sonoma +3

Name of the Vulnerable Software and Affected Versions: macOS Sonoma versions prior to 14.4 iOS versions prior to 17.4 iPadOS versions prior to 17.4 Description: A privacy issue was addressed by not logging contents of text fields, which could allow an app to view Mail data. Recommendations: For...

PT-2024-19721 · Apple · Visionos +2

Name of the Vulnerable Software and Affected Versions: visionOS versions prior to 1.1 iOS versions prior to 17.4 iPadOS versions prior to 17.4 Description: The issue was addressed with improved handling of caches. An app may be able to fingerprint the user. Recommendations: For visionOS versions...

PT-2024-19745 · Apple · Macos Sonoma +5

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 17.4 Apple iPadOS versions prior to 17.4 Apple tvOS versions prior to 17.4 Apple macOS Sonoma versions prior to 14.4 Apple watchOS versions prior to 10.4 Description: An access issue was addressed with improved...

Apple Multiple Product Security Vulnerabilities

Apple iOS and others are products of Apple Inc.Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for iPad tablets.Apple macOS Sonoma is a desktop operating system.Apple iOS is an operating system developed for mobile devices.Apple iOS is an operatin...