CVE-2024-23265

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5, tvOS 17.4, visionOS 1.1, watchOS 10.4. An app may be able to cause unexpected syste...

CVE-2024-23273

CVE-2024-23273 affects Safari Private Browsing across Safari 17.4, iOS 17.4, iPadOS 17.4, and macOS Sonoma 14.4. The underlying issue, described as improved state management, could allow Private Browsing tabs to be accessed without authentication. The CVSS v3.1 base score is 4.3 (Medium), with im...

CVE-2024-23273

This issue was addressed through improved state management. This issue is fixed in Safari 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4. Private Browsing tabs may be accessed without authentication...

CVE-2024-23273

This issue was addressed through improved state management. This issue is fixed in Safari 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4. Private Browsing tabs may be accessed without authentication...

CVE-2024-23264

CVE-2024-23264 describes a validation issue addressed by improved input sanitization. Affected software includes macOS versions (Monterey 12.7.4; Ventura 13.6.5; Sonoma 14.4), visionOS 1.1, iOS 17.4 and iPadOS 17.4, and older iOS/iPadOS 16.7.6, as well as tvOS 17.4. The issue may allow an applica...

CVE-2024-23291

A privacy issue in Apple software allows a malicious app to observe user data within log entries specifically related to accessibility notifications . The root cause is a lack of sufficient private data redaction. This vulnerability affects iOS 17.4 , iPadOS 17.4 , macOS Sonoma 14.4 , tvOS 17.4 ,...

CVE-2024-23287

A privacy issue was addressed with improved handling of temporary files. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, watchOS 10.4. An app may be able to access user-sensitive data...

CVE-2024-23287

CVE-2024-23287 concerns a privacy issue in Apple platforms where improved handling of temporary files fixes a vulnerability that could allow an app to access user-sensitive data. Affected products/versions (per provided documents): macOS Sonoma 14.4, iOS 17.4, iPadOS 17.4, watchOS 10.4. The entry...

CVE-2024-23287

A privacy issue was addressed with improved handling of temporary files. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, watchOS 10.4. An app may be able to access user-sensitive data...

CVE-2024-23205

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4. An app may be able to access sensitive user data...

CVE-2024-23205

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4. An app may be able to access sensitive user data...

CVE-2024-23205

CVE-2024-23205 describes a privacy issue in Apple platforms where an app may be able to access sensitive user data due to insufficient private data redaction in log entries. The vulnerability is fixed in macOS Sonoma 14.4, iOS 17.4, and iPadOS 17.4. Affected components are tied to log handling, w...

CVE-2024-23252

CVE-2024-23252 is rejected; this CVE entry is not an active vulnerability.

CVE-2024-23292

This issue was addressed with improved data protection. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4. An app may be able to access information about a user's contacts...

CVE-2024-23292

CVE-2024-23292 affects Apple platforms: macOS Sonoma 14.4, iOS 17.4, and iPadOS 17.4. The issue allows an app to access information about a user’s contacts due to inadequate data protection. The root cause is addressed in these updates with improved data protection, and Apple lists the fixed vers...

CVE-2024-23292

This issue was addressed with improved data protection. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4. An app may be able to access information about a user's contacts...

CVE-2024-23284

CVE-2024-23284 concerns a logic issue in WebKitGTK/WebKit rendering where processing maliciously crafted web content may prevent Content Security Policy (CSP) from being enforced. The connected sources show the same vulnerability across multiple distributions (e.g., Debian webkit2gtk advisories a...

CVE-2024-23284

A logic issue was addressed with improved state management. This issue is fixed in Safari 17.4, iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, watchOS 10.4. Processing maliciously crafted web content may prevent Content Security Policy from bei...

CVE-2024-23284

A logic issue was addressed with improved state management. This issue is fixed in Safari 17.4, iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, watchOS 10.4. Processing maliciously crafted web content may prevent Content Security Policy from bei...

CVE-2024-23226

CVE-2024-23226 affects Apple OS stack and is about improper memory handling during processing of web content, leading to arbitrary code execution. Connected advisories corroborate the issue and note fixes in macOS Sonoma 14.4, visionOS 1.1, iOS 17.4, iPadOS 17.4, watchOS 10.4, and tvOS 17.4. The ...