CVE-2024-27874

This issue was addressed through improved state management. This issue is fixed in iOS 18 and iPadOS 18. A remote attacker may be able to cause a denial-of-service...

UBUNTU-CVE-2024-44187

A cross-origin issue existed with "iframe" elements. This was addressed with improved tracking of security origins. This issue is fixed in Safari 18, iOS 18 and iPadOS 18, macOS Sequoia 15, tvOS 18, visionOS 2, watchOS 11. A malicious website may exfiltrate data cross-origin...

CVE-2024-44132

CVE-2024-44132 is a macOS sandbox escape issue resolved in macOS Sequoia 15. The vulnerability arises from improper handling of symlinks, enabling a sandboxed app to break out of its confinement. Public references (NVD, NCSC advisories, Red Hat RH security) corroborate the same description and fi...

CVE-2024-44190

CVE-2024-44190 describes a path handling issue in macOS that could allow an app to read arbitrary files. The root cause is insufficient validation in path handling, and Apple fixed this in macOS Ventura 13.7, macOS Sonoma 14.7, and macOS Sequoia 15. Remediation is to deploy the listed macOS updat...

CVE-2024-44129

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15, macOS Ventura 13.7. An app may be able to leak sensitive user information...

CVE-2024-44129

CVE-2024-44129 affects macOS Ventura 13.7 and macOS Sequoia 15. The issue could allow an app to leak sensitive user information due to insufficient checks. Apple fixed it in the listed releases by implementing improved checks. No exploitation status is provided in the connected documents. Remedia...

CVE-2024-44187

A cross-origin issue existed with "iframe" elements. This was addressed with improved tracking of security origins. This issue is fixed in Safari 18, iOS 18 and iPadOS 18, macOS Sequoia 15, tvOS 18, visionOS 2, watchOS 11. A malicious website may exfiltrate data cross-origin...

CVE-2024-44164

This CVE (CVE-2024-44164) affects Apple platforms and describes a potential bypass of Privacy preferences. Public references indicate fixes in iOS 17.7 / iPadOS 17.7, macOS Ventura 13.7, macOS Sonoma 14.7, and macOS Sequoia 15. The provided documents do not specify the affected product families, ...

CVE-2024-44180

The CVE-2024-44180 entry concerns Apple iOS 18 and iPadOS 18. Affected component: the lock-screen privacy control for contacts. Root cause per sources: inadequate checks allowing an attacker with physical access to potentially access contacts from the lock screen. Impact stated by Apple and corro...

CVE-2024-44163

CVE-2024-44163 affects macOS, with fixes in macOS Sequoia 15, macOS Sonoma 14.7, and macOS Ventura 13.7. The issue is described as being mitigated by improved checks, permitting a malicious application to access private information. The connected sources confirm the same remediation and version t...

CVE-2024-44163

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. A malicious application may be able to access private information...

CVE-2024-27876

A race condition was addressed with improved locking. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7, visionOS 2. Unpacking a maliciously crafted archive may allow an attacker to write arbitrary files...

CVE-2024-27876

A race condition was addressed with improved locking. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7, visionOS 2. Unpacking a maliciously crafted archive may allow an attacker to write arbitrary files...

CVE-2024-27876

A race condition exists in libAppleArchive that could allow an attacker to write arbitrary files when unpacking a maliciously crafted archive. This vulnerability was addressed by implementing improved locking. Affected systems include iOS 17.7 , iPadOS 17.7 , iOS 18 , iPadOS 18 , macOS Sequoia 15...

CVE-2024-44139

The issue was addressed with improved checks. This issue is fixed in iOS 18 and iPadOS 18. An attacker with physical access may be able to access contacts from the lock screen...

CVE-2024-44139

CVE-2024-44139 affects iOS 18 and iPadOS 18; fix implemented in those versions. The vulnerability allowed an attacker with physical access to potentially access contacts from the lock screen. Root cause described as requiring improved checks; no explicit exploitation details are provided in the s...

CVE-2024-40843

CVE-2024-40843 affects macOS Sequoia 15. The issue involves an app potentially modifying protected parts of the file system. Root cause: insufficient checks that allowed modification of protected filesystem areas. Impact: local privilege/unauthorized access risk in macOS 15 environments. Remediat...

CVE-2024-27880

CVE-2024-27880 is an out-of-bounds read vulnerability affecting Apple platforms. Processing a maliciously crafted file may cause an application to terminate unexpectedly. It is fixed in: iOS 17.7 and iPadOS 17.7, visionOS 2, watchOS 11, macOS Sequoia 15, iOS 18 and iPadOS 18, macOS Sonoma 14.7, a...

CVE-2024-40840

CVE-2024-40840 affects Apple iOS 18 and iPadOS 18. The issue arises from a state-management weakness that could allow an attacker with physical access to use Siri to access sensitive user data. Apple states the vulnerability is fixed in iOS 18 / iPadOS 18. Practical impact is limited to scenarios...

CVE-2024-44161

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. Processing a maliciously crafted texture may lead to unexpected app termination...