CVE-2024-54470

A logic issue was addressed with improved checks. This issue is fixed in iOS 18.1 and iPadOS 18.1, iOS 17.7.1 and iPadOS 17.7.1. An attacker with physical access may be able to access contacts from the lock screen...

CVE-2024-54535

A path handling issue was addressed with improved logic. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, visionOS 2.1, watchOS 11.1. An attacker with access to calendar data could also read reminders...

CVE-2024-54470

CVE-2024-54470 affects iOS and iPadOS prior to patches in iOS 18.1 / iPadOS 18.1 and iOS 17.7.1 / iPadOS 17.7.1. A logic issue allowed an attacker with physical access to a locked device to access contacts from the lock screen (through the Siri accessibility path noted in Apple’s security content...

CVE-2024-40839

This issue was addressed through improved state management. This issue is fixed in iOS 17.5 and iPadOS 17.5. An attacker with physical access to an iOS device may be able to view notification contents from the Lock Screen...

CVE-2024-40839

CVE-2024-40839 affects Apple iOS and iPadOS (Lock Screen). Reported issue arises from improper/insufficient state management that could allow a local attacker with physical access to view notification contents on the lock screen. The vulnerability is fixed in iOS 17.5 and iPadOS 17.5. Connected s...

CVE-2024-40854

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. An app may be able to cause unexpected system termination...

CVE-2024-40854

CVE-2024-40854 describes a memory initialization issue addressed by Apple in macOS/OS updates. Affected components are iOS 18.1 and iPadOS 18.1, iOS 17.7.1 and iPadOS 17.7.1, macOS Sonoma 14.7.1, and macOS Ventura 13.7.1. The vulnerability may allow an app to cause an unexpected system terminatio...

CVE-2024-40839

This issue was addressed through improved state management. This issue is fixed in iOS 17.5 and iPadOS 17.5. An attacker with physical access to an iOS device may be able to view notification contents from the Lock Screen...

CVE-2024-27856

The issue was addressed with improved checks. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2, watchOS 10.5. Processing a file may lead to unexpected app termination or arbitrary code execution...

CVE-2024-44136

This issue was addressed through improved state management. This issue is fixed in iOS 17.5 and iPadOS 17.5. An attacker with physical access to a device may be able to disable Stolen Device Protection...

CVE-2024-44136

A security vulnerability in Face ID was addressed through improved state management . An attacker with physical access to a device could potentially disable Stolen Device Protection . This issue was fixed in iOS 17.5 and iPadOS 17.5 . Specific details regarding active exploitation have not been p...

CVE-2024-27856: Improper Control of Generation of Code

The issue was addressed with improved checks. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2, watchOS 10.5. Processing a file may lead to unexpected app termination or arbitrary code execution...

CVE-2024-40854: Undefined Security Weakness

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. An app may be able to cause unexpected system termination...

CVE-2024-54470: Missing Authorization

A logic issue was addressed with improved checks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1. An attacker with physical access may be able to access contacts from the lock screen...

CVE-2024-54535: Improper Limitation of a Pathname to a Restricted Directory

A path handling issue was addressed with improved logic. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, visionOS 2.1, watchOS 11.1. An attacker with access to calendar data could also read reminders...

CVE-2024-44136: Incorrect Authorization

This issue was addressed through improved state management. This issue is fixed in iOS 17.5 and iPadOS 17.5. An attacker with physical access to a device may be able to disable Stolen Device Protection...

CVE-2024-40839: Missing Authorization

This issue was addressed through improved state management. This issue is fixed in iOS 17.5 and iPadOS 17.5. An attacker with physical access to an iOS device may be able to view notification contents from the Lock Screen...

CVE-2024-40771: Incorrect Authorization

The issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7, tvOS 17.5, visionOS 1.2, watchOS 10.5. An app may be able to execute arbitrary code with kernel...

CVE-2025-21133: Integer Underflow (Wrap or Wraparound)

Illustrator on iPad versions 3.0.7 and earlier are affected by an Integer Underflow Wrap or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Apple Security Update: iOS 18.2.1 and iPadOS 18.2.1

Apple recommends to install security update iOS 18.2.1 and iPadOS 18.2.1 on devices iPhone XS and later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 7th generation and later, and iPad mini 5th...