CVE-2024-27876

CVE-2024-27876 describes a race condition in Apple’s archive unpacking that could allow writing arbitrary files when a malicious archive is unpacked. The issue is addressed by improved locking and is fixed in: macOS Ventura 13.7; macOS Sonoma 14.7; macOS Sequoia 15; iOS 17.7 and iPadOS 17.7; iOS ...

CVE-2024-44158

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 17.7 and iPadOS 17.7, macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. A shortcut may output sensitive user data without consent...

CVE-2024-44158

Apple CVE-2024-44158 concerns a flaw where a shortcut could output sensitive user data without consent. The public description cites fixes in iOS 17.7 and iPadOS 17.7, macOS Ventura 13.7, macOS Sonoma 14.7, and macOS Sequoia 15. The issue appears to be addressed by improved redaction of sensitive...

CVE-2024-44158

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 17.7 and iPadOS 17.7, macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. A shortcut may output sensitive user data without consent...

CVE-2024-44139

CVE-2024-44139 affects iOS 18 and iPadOS 18; fix implemented in those versions. The vulnerability allowed an attacker with physical access to potentially access contacts from the lock screen. Root cause described as requiring improved checks; no explicit exploitation details are provided in the s...

CVE-2024-44139

The issue was addressed with improved checks. This issue is fixed in iOS 18 and iPadOS 18. An attacker with physical access may be able to access contacts from the lock screen...

CVE-2024-40856

An integrity issue was addressed with Beacon Protection. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15, tvOS 18. An attacker may be able to force a device to disconnect from a secure network...

CVE-2024-40856

CVE-2024-40856 affects Apple platforms (iOS 18, iPadOS 18, tvOS 18, macOS Sequoia 15). Root cause: an integrity issue addressed by Beacon Protection that could allow an attacker to force a device to disconnect from a secure network. Impact: network disconnection vulnerability as described; no exp...

CVE-2024-40856

An integrity issue was addressed with Beacon Protection. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15, tvOS 18. An attacker may be able to force a device to disconnect from a secure network...

CVE-2024-27879

CVE-2024-27879 concerns an input/bounds-check vulnerability in iOS/iPadOS UIKit components that could let an attacker trigger an unexpected application termination. Public sources confirm the issue is fixed in iOS 17.7 and iPadOS 17.7, and in iOS 18 / iPadOS 18. The NVD/NCSC/NVD-affiliates consis...

CVE-2024-27879

The issue was addressed with improved bounds checks. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18. An attacker may be able to cause unexpected app termination...

CVE-2024-27879

The issue was addressed with improved bounds checks. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18. An attacker may be able to cause unexpected app termination...

CVE-2024-27880

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7, tvOS 18, visionOS 2, watchOS 11. Processing a maliciously crafted file may lead to unexpected app termination...

CVE-2024-27880

CVE-2024-27880 is an out-of-bounds read vulnerability affecting Apple platforms. Processing a maliciously crafted file may cause an application to terminate unexpectedly. It is fixed in: iOS 17.7 and iPadOS 17.7, visionOS 2, watchOS 11, macOS Sequoia 15, iOS 18 and iPadOS 18, macOS Sonoma 14.7, a...

CVE-2024-40840

CVE-2024-40840 affects Apple iOS 18 and iPadOS 18. The issue arises from a state-management weakness that could allow an attacker with physical access to use Siri to access sensitive user data. Apple states the vulnerability is fixed in iOS 18 / iPadOS 18. Practical impact is limited to scenarios...

CVE-2024-40840

This issue was addressed through improved state management. This issue is fixed in iOS 18 and iPadOS 18. An attacker with physical access may be able to use Siri to access sensitive user data...

CVE-2024-40840

This issue was addressed through improved state management. This issue is fixed in iOS 18 and iPadOS 18. An attacker with physical access may be able to use Siri to access sensitive user data...

CVE-2024-44198

An integer overflow was addressed through improved input validation. This issue is fixed in visionOS 2, watchOS 11, macOS Sequoia 15, iOS 18 and iPadOS 18, tvOS 18. Processing maliciously crafted web content may lead to an unexpected process crash...

CVE-2024-44198

An integer overflow was addressed through improved input validation. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15, tvOS 18, visionOS 2, watchOS 11. Processing maliciously crafted web content may lead to an unexpected process crash...

CVE-2024-27874

This issue was addressed through improved state management. This issue is fixed in iOS 18 and iPadOS 18. A remote attacker may be able to cause a denial-of-service...