CVE-2024-23242

A privacy issue was addressed by not logging contents of text fields. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4. An app may be able to view Mail data...

CVE-2024-23242

CVE-2024-23242 describes a privacy issue where content in text fields was logged, allowing an app to view Mail data. The NCIS of this flaw is not logging such information and affects Apple platforms: the vulnerability is fixed in macOS Sonoma 14.4 and in iOS/iPadOS 17.4. The root cause is not det...

CVE-2024-23254

The issue was addressed with improved UI handling. This issue is fixed in Safari 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, watchOS 10.4. A malicious website may exfiltrate audio data cross-origin...

CVE-2024-23254

CVE-2024-23254 concerns WebKit/WebKitGTK components where a malicious website could exfiltrate audio data cross-origin. The initial entry notes the issue is fixed in Apple platforms: tvOS 17.4, macOS Sonoma 14.4, visionOS 1.1, iOS 17.4, iPadOS 17.4, watchOS 10.4, and Safari 17.4. Public disclosur...

CVE-2024-23262

This issue was addressed with additional entitlement checks. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, visionOS 1.1. An app may be able to spoof system notifications and UI...

CVE-2024-23262

This issue was addressed with additional entitlement checks. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, visionOS 1.1. An app may be able to spoof system notifications and UI...

CVE-2024-23262

A design/logic flaw in visionOS , iOS , and iPadOS allows an application to spoof system notifications and UI . The root cause was addressed by implementing additional entitlement checks . This vulnerability affects visionOS versions prior to 1.1, iOS versions prior to 17.4 and 16.7.6, and iPadOS...

CVE-2024-23235

A race condition was addressed with additional validation. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, watchOS 10.4. An app may be able to access user-sensitive data...

CVE-2024-23235

A race condition in the kernel of iOS , macOS Sonoma , iPadOS , tvOS , visionOS , and watchOS allows an application to access user-sensitive data . The vulnerability was addressed with additional validation. Fixed versions include iOS 16.7.6 , iPadOS 16.7.6 , iOS 17.4 , iPadOS 17.4 , macOS Sonoma...

CVE-2024-23235

A race condition was addressed with additional validation. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, watchOS 10.4. An app may be able to access user-sensitive data...

CVE-2024-23286

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5, tvOS 17.4, visionOS 1.1, watchOS 10.4. Processing an image may lead to arbitrary code...

CVE-2024-23286

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5, tvOS 17.4, visionOS 1.1, watchOS 10.4. Processing an image may lead to arbitrary code...

CVE-2024-23286

A buffer overflow vulnerability exists in the ImageIO component across multiple Apple operating systems, including iOS, iPadOS, tvOS, watchOS, macOS, and visionOS . The root cause is the execution of operations outside of the buffer in memory during image processing. Successful exploitation of th...

CVE-2024-23290

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS 10.4. An app may be able to access user-sensitive data...

CVE-2024-23290

CVE-2024-23290 is a logic issue fixed by platform updates: tvOS 17.4, iOS 17.4, and iPadOS 17.4; macOS Sonoma 14.4; watchOS 10.4. The issue could allow an app to access user‑sensitive data due to improved restrictions. No exploitation details are provided beyond the remediation versions.

CVE-2024-23265

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5, tvOS 17.4, visionOS 1.1, watchOS 10.4. An app may be able to cause unexpected syste...

CVE-2024-23265

A memory corruption vulnerability exists in several Apple operating systems, including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS . The root cause is a flaw addressed through improved locking , which could allow a malicious app to cause unexpected system termination or write kernel memory . ...

CVE-2024-23273

This issue was addressed through improved state management. This issue is fixed in Safari 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4. Private Browsing tabs may be accessed without authentication...

CVE-2024-23273

CVE-2024-23273 affects Safari Private Browsing across Safari 17.4, iOS 17.4, iPadOS 17.4, and macOS Sonoma 14.4. The underlying issue, described as improved state management, could allow Private Browsing tabs to be accessed without authentication. The CVSS v3.1 base score is 4.3 (Medium), with im...

CVE-2024-23273

This issue was addressed through improved state management. This issue is fixed in Safari 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4. Private Browsing tabs may be accessed without authentication...