CVE-2024-23201

CVE-2024-23201 is an Apple macOS/iOS vulnerability described as a permissions issue that, if exploited by an app, could cause a denial-of-service. The issue is fixed in macOS Monterey 12.7.4, macOS Ventura 13.6.5, macOS Sonoma 14.3, watchOS 10.3, tvOS 17.3, iOS 17.3, and iPadOS 17.3. Related docu...

CVE-2024-23201

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 17.3 and iPadOS 17.3, macOS Monterey 12.7.4, macOS Sonoma 14.3, macOS Ventura 13.6.5, tvOS 17.3, watchOS 10.3. An app may be able to cause a denial-of-service...

CVE-2024-23201

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 17.3 and iPadOS 17.3, macOS Monterey 12.7.4, macOS Sonoma 14.3, macOS Ventura 13.6.5, tvOS 17.3, watchOS 10.3. An app may be able to cause a denial-of-service...

CVE-2024-23240

CVE-2024-23240 affects Apple iOS/iPadOS via the Photos feature, where the shake-to-undo workflow could re-surface a deleted photo without authentication. The issue is addressed in iOS 17.4 and iPadOS 17.4 with updated checks. If you rely on this CVE data, apply the 17.4 updates to mitigate. The c...

CVE-2024-23240

The issue was addressed with improved checks. This issue is fixed in iOS 17.4 and iPadOS 17.4. Shake-to-undo may allow a deleted photo to be re-surfaced without authentication...

CVE-2024-23283

CVE-2024-23283 describes a privacy issue where private data was not properly redacted in log entries. The NVD entry states the issue is fixed in iOS 16.7.6, iPadOS 16.7.6, macOS Monterey 12.7.4, macOS Sonoma 14.4, and macOS Ventura 13.6.5, addressing a potential exposure of user‑sensitive data. T...

CVE-2024-23283

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app may be able to access user-sensitive data...

CVE-2024-23226

The issue was addressed with improved memory handling. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, watchOS 10.4. Processing web content may lead to arbitrary code execution...

Apple Releases Security Updates for iOS and iPadOS

Apple released security updates to address vulnerabilities in iOS and iPadOS. A cyber threat actor could exploit one of these vulnerabilities to obtain sensitive information. CISA encourages users and administrators to review the following security releases and apply the necessary updates: iOS 17...

PT-2024-19757 · Apple · Visionos +2

Name of the Vulnerable Software and Affected Versions: visionOS versions prior to 1.1 iOS versions prior to 17.4 iOS versions prior to 16.7.6 iPadOS versions prior to 17.4 iPadOS versions prior to 16.7.6 Description: An app may be able to spoof system notifications and UI. This issue was addresse...

PT-2024-19726 · Apple · Macos Sonoma +5

Name of the Vulnerable Software and Affected Versions: macOS Ventura versions prior to 13.6.5 macOS Sonoma versions prior to 14.4 iOS versions prior to 17.4 iPadOS versions prior to 17.4 watchOS versions prior to 10.4 iOS versions prior to 16.7.6 iPadOS versions prior to 16.7.6 Description: A...

PT-2024-19721 · Apple · Visionos +2

Name of the Vulnerable Software and Affected Versions: visionOS versions prior to 1.1 iOS versions prior to 17.4 iPadOS versions prior to 17.4 Description: The issue was addressed with improved handling of caches. An app may be able to fingerprint the user. Recommendations: For visionOS versions...

PT-2024-2162 · Apple · Macos Sonoma +7

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.7.4 macOS Ventura versions prior to 13.6.5 macOS Sonoma versions prior to 14.4 visionOS versions prior to 1.1 iOS versions prior to 17.4 iPadOS versions prior to 17.4 watchOS versions prior to 10.4 iOS versions prio...

PT-2024-19745 · Apple · Macos Sonoma +5

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 17.4 Apple iPadOS versions prior to 17.4 Apple tvOS versions prior to 17.4 Apple macOS Sonoma versions prior to 14.4 Apple watchOS versions prior to 10.4 Description: An access issue was addressed with improved...

PT-2024-19759

Name of the Vulnerable Software and Affected Versions macOS versions 12.7.4 through 14.4 visionOS version 1.1 iOS versions 16.7.6, 17.4 iPadOS versions 16.7.6, 17.4 watchOS version 10.4 tvOS version 17.4 Description A memory corruption issue was addressed through improved locking mechanisms. The...

Apple Multiple Product Security Vulnerabilities

Apple iOS and others are products of Apple Inc.Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for iPad tablets.Apple macOS Sonoma is a desktop operating system.Apple iOS is an operating system developed for mobile devices.Apple iOS is an operatin...

PT-2024-19780 · Apple · Macos Sonoma +4

Name of the Vulnerable Software and Affected Versions: macOS Sonoma versions prior to 14.4 iOS versions prior to 17.4 iPadOS versions prior to 17.4 watchOS versions prior to 10.4 Description: A privacy issue was addressed with improved handling of temporary files. This issue may allow an app to...

PT-2024-19737 · Apple · Macos Sonoma +3

Name of the Vulnerable Software and Affected Versions: macOS Sonoma versions prior to 14.4 iOS versions prior to 17.4 iPadOS versions prior to 17.4 Description: A privacy issue was addressed by not logging contents of text fields, which could allow an app to view Mail data. Recommendations: For...

PT-2024-2615 · Apple +1 · Ios +7

Name of the Vulnerable Software and Affected Versions: macOS Sonoma versions prior to 14.4 visionOS versions prior to 1.1 iOS versions prior to 17.4 iPadOS versions prior to 17.4 watchOS versions prior to 10.4 tvOS versions prior to 17.4 Description: The issue is related to a component of WebKit ...

Update your iPhones and iPads now: Apple patches security vulnerabilities in iOS and iPadOS

Apple has released a security update for iOS and iPadOS to patch two zero-day vulnerabilities which are reported to already have been exploited. Zero-day vulnerabilities are discovered by attackers before the software company itself - meaning the vendor has zero days to fix them. Both the two...