CVE-2024-40809: Undefined Security Weakness

A logic issue was addressed with improved checks. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8, visionOS 1.3, watchOS 10.6. A shortcut may be able to bypass Internet permission requirements...

CVE-2024-40805: Incorrect Default Permissions

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, watchOS 10.6. An app may be able to bypass Privacy preferences...

About the security content of iOS 17.6 and iPadOS 17.6

About the security content of iOS 17.6 and iPadOS 17.6 This document describes the security content of iOS 17.6 and iPadOS 17.6. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...

Apple Security Update: iOS 15.8.3 and iPadOS 15.8.3

Apple recommends to install security update iOS 15.8.3 and iPadOS 15.8.3 on devices iPhone 6s all models, iPhone 7 all models, iPhone SE 1st generation, iPad Air 2, iPad mini 4th generation, and iPod touch 7th generation...

PT-2024-29072

Name of the Vulnerable Software and Affected Versions macOS versions prior to 13.6.8 macOS Sonoma versions prior to 14.6 iOS versions prior to 17.6 iPadOS versions prior to 17.6 watchOS versions prior to 10.6 tvOS versions prior to 17.6 Description A race condition issue was addressed with...

PT-2024-29093 · Apple · Macos Sonoma +4

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 10.6 macOS Sonoma versions prior to 14.6 iOS versions prior to 17.6 iPadOS versions prior to 17.6 iOS versions prior to 16.7.9 iPadOS versions prior to 16.7.9 Description: A logic issue was addressed with improved...

CVE-2024-40798: Exposure of Sensitive Information to an Unauthorized Actor

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. An app may be able to read Safari's browsing history...

CVE-2024-40778: Improper Authentication

An authentication issue was addressed with improved state management. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6. Photos in the Hidden Photos Album may be viewed without authentication...

Apple iOS and Apple iPadOS security vulnerabilities

Apple iOS and Apple iPadOS are products of Apple Inc.Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS before version 16.7.9 and iPadOS before version 16.7.9, which stems from the fact...

CVE-2024-40788: Access of Resource Using Incompatible Type

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8, tvOS 17.6, visionOS 1.3, watchOS 10.6. A local attacker may be able to cause unexpecte...

CVE-2023-42925: Exposure of Sensitive Information to an Unauthorized Actor

The issue was addressed with improved restriction of data container access. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to access Notes attachments...

CVE-2024-40787: Undefined Security Weakness

This issue was addressed by adding an additional prompt for user consent. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8, watchOS 10.6. A shortcut may be able to bypass Internet permission requirements...

Apple iOS and Apple iPadOS security vulnerabilities

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS version 16.7.9 and iPadOS version 16.7.9, which stems from handling malicious...

CVE-2024-40774: Undefined Security Weakness

A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8, tvOS 17.6, watchOS 10.6. An app may be able to bypass Privacy preferences...

PT-2024-29044

Name of the Vulnerable Software and Affected Versions iOS versions prior to 17.6 iPadOS versions prior to 17.6 iOS versions prior to 16.7.9 iPadOS versions prior to 16.7.9 macOS Ventura versions prior to 13.6.8 Description The issue allows an attacker to view sensitive user information. It was...

PT-2024-29045 · Apple · Macos Monterey +6

Name of the Vulnerable Software and Affected Versions: macOS Ventura versions prior to 13.6.8 macOS Monterey versions prior to 12.7.6 iOS versions prior to 17.6 iPadOS versions prior to 17.6 watchOS versions prior to 10.6 macOS Sonoma versions prior to 14.6 Description: This issue allows a shortc...

PT-2024-29033 · Apple · Ipados +7

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.6.8 macOS Monterey versions prior to 12.7.6 iOS versions prior to 17.6 iPadOS versions prior to 17.6 watchOS versions prior to 10.6 tvOS versions prior to 17.6 macOS Sonoma versions prior to 14.6 Description: A...

PT-2025-12384

Name of the Vulnerable Software and Affected Versions visionOS versions prior to 1.3 macOS Sonoma versions prior to 14.6 iOS versions prior to 17.6 iPadOS versions prior to 17.6 Description The issue concerns a file received from AirDrop that may not have the quarantine flag applied. This was...

CVE-2024-40835: Undefined Security Weakness

A logic issue was addressed with improved checks. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8, watchOS 10.6. A shortcut may be able to use sensitive data with certain actions without prompting the us...

CVE-2024-40793: Exposure of Sensitive Information to an Unauthorized Actor

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8, watchOS 10.6. An app may be able to access user-sensitive data...