CVE-2024-27876

A race condition was addressed with improved locking. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7, visionOS 2. Unpacking a maliciously crafted archive may allow an attacker to write arbitrary files...

CVE-2024-27876

A race condition exists in libAppleArchive that could allow an attacker to write arbitrary files when unpacking a maliciously crafted archive. This vulnerability was addressed by implementing improved locking. Affected systems include iOS 17.7 , iPadOS 17.7 , iOS 18 , iPadOS 18 , macOS Sequoia 15...

CVE-2024-44139

The issue was addressed with improved checks. This issue is fixed in iOS 18 and iPadOS 18. An attacker with physical access may be able to access contacts from the lock screen...

CVE-2024-44139

CVE-2024-44139 affects iOS 18 and iPadOS 18; fix implemented in those versions. The vulnerability allowed an attacker with physical access to potentially access contacts from the lock screen. Root cause described as requiring improved checks; no explicit exploitation details are provided in the s...

CVE-2024-40843

CVE-2024-40843 affects macOS Sequoia 15. The issue involves an app potentially modifying protected parts of the file system. Root cause: insufficient checks that allowed modification of protected filesystem areas. Impact: local privilege/unauthorized access risk in macOS 15 environments. Remediat...

CVE-2024-27880

CVE-2024-27880 is an out-of-bounds read vulnerability affecting Apple platforms. Processing a maliciously crafted file may cause an application to terminate unexpectedly. It is fixed in: iOS 17.7 and iPadOS 17.7, visionOS 2, watchOS 11, macOS Sequoia 15, iOS 18 and iPadOS 18, macOS Sonoma 14.7, a...

CVE-2024-40840

CVE-2024-40840 affects Apple iOS 18 and iPadOS 18. The issue arises from a state-management weakness that could allow an attacker with physical access to use Siri to access sensitive user data. Apple states the vulnerability is fixed in iOS 18 / iPadOS 18. Practical impact is limited to scenarios...

CVE-2024-44161

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. Processing a maliciously crafted texture may lead to unexpected app termination...

CVE-2024-44161

CVE-2024-44161 is an out-of-bounds read vulnerability in macOS texture processing that could cause an application to terminate if a maliciously crafted texture is processed. The issue is mitigated by improved bounds checking and is fixed in macOS Ventura 13.7, macOS Sonoma 14.7, and macOS Sequoia...

CVE-2024-27874

This issue was addressed through improved state management. This issue is fixed in iOS 18 and iPadOS 18. A remote attacker may be able to cause a denial-of-service...

CVE-2024-27875

CVE-2024-27875 affects macOS Sequoia 15.0 and is described as a logic/state-management issue that can cause Privacy Indicators for microphone or camera access to be attributed incorrectly. The primary sources (NVD/NVD+CNA, Red Hat advisory, Apple security notes) confirm a fix in macOS Sequoia 15 ...

CVE-2024-27874

CVE-2024-27874 concerns Apple iOS and iPadOS. The issue stems from a state-management problem that allowed a remote attacker to trigger a denial-of-service. It affects versions prior to the fixed release, with mitigation provided by upgrades to iOS 18 and iPadOS 18. Connected advisories corrobora...

CVE-2024-27874

This issue was addressed through improved state management. This issue is fixed in iOS 18 and iPadOS 18. A remote attacker may be able to cause a denial-of-service...

CVE-2024-40861

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15. An app may be able to gain root privileges...

CVE-2024-40861

CVE-2024-40861 affects macOS prior to the Sequoia 15 release. The issue could allow an app to gain root privileges via a local attack vector. Apple’s advisory states the vulnerability was addressed with “improved checks” and that it is fixed in macOS Sequoia 15. The NVD/NVD-derived metrics confir...

CVE-2024-44171

This issue was addressed through improved state management. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, watchOS 11. An attacker with physical access to a locked device may be able to Control Nearby Devices via accessibility features...

CVE-2024-40850

A file access issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13.7, iOS 17.7 and iPadOS 17.7, visionOS 2, watchOS 11, macOS Sequoia 15, iOS 18 and iPadOS 18, macOS Sonoma 14.7, tvOS 18. An app may be able to access user-sensitive data...

CVE-2024-40850

A file access issue was addressed with improved input validation. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7, tvOS 18, visionOS 2, watchOS 11. An app may be able to access user-sensitive data...

CVE-2024-27869

A security vulnerability in iOS 18 , iPadOS 18 , and macOS Sequoia 15 allows an application to record the screen without a visible indicator . This issue was addressed by Apple through improved checks and is fixed in the aforementioned versions. No specific details regarding the root cause or exp...

CVE-2024-44147

A security vulnerability in Apple iOS 18 and iPadOS 18 allows an application to gain unauthorized access to the Local Network . This issue was addressed through improved state management . The vulnerability is fixed in the specified versions of iOS and iPadOS. Exploitation details are not provide...