CVE-2024-23214

CVE-2024-23214 involves multiple memory corruption issues in Web content handling. Root cause: improved memory handling fixed in macOS Sonoma 14.3, iOS 16.7.5/iPadOS 16.7.5, and iOS 17.3/iPadOS 17.3, with arbitrary code execution impact if exploited. Connected Nessus entry notes some Linux distri...

CVE-2024-23203

The issue was addressed with additional permissions checks. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, macOS Ventura 13.6.5. A shortcut may be able to use sensitive data with certain actions without prompting the user...

CVE-2024-23215

An issue was addressed with improved handling of temporary files. This issue is fixed in iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, tvOS 17.3, watchOS 10.3. An app may be able to access user-sensitive data...

CVE-2024-23203

CVE-2024-23203 affects Apple Shortcuts on macOS Sonoma 14.3, iOS 17.3, and iPadOS 17.3. A shortcut may access sensitive data via certain actions without prompting the user. Root cause: insufficient permissions checks; fixed by additional permissions checks. Remediation: update to macOS Sonoma 14....

CVE-2024-23215

CVE-2024-23215 affects Apple platforms via an issue in the handling of temporary files that may allow an app to access user‑sensitive data. The affected products are macOS Sonoma 14.3; watchOS 10.3; tvOS 17.3; iOS 17.3; and iPadOS 17.3. Apple has addressed the vulnerability in these releases. The...

CVE-2024-23223

A privacy issue was addressed with improved handling of files. This issue is fixed in iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, tvOS 17.3, watchOS 10.3. An app may be able to access sensitive user data...

CVE-2024-23223

CVE-2024-23223 describes a privacy issue resolved by Apple in macOS Sonoma 14.3, watchOS 10.3, tvOS 17.3, iOS 17.3 and iPadOS 17.3. The issue allows an app to access sensitive user data due to improved handling of files. The NVD/CNA metrics list a low attack complexity, local attack vector, no pr...

CVE-2024-23219

The issue was addressed with improved authentication. This issue is fixed in iOS 17.3 and iPadOS 17.3. Stolen Device Protection may be unexpectedly disabled...

CVE-2024-23219

The issue was addressed with improved authentication. This issue is fixed in iOS 17.3 and iPadOS 17.3. Stolen Device Protection may be unexpectedly disabled...

CVE-2024-23219

Apple CVE-2024-23219 is an authentication flaw affecting Stolen Device Protection that could be unexpectedly disabled. Connected sources confirm the issue is addressed with improved authentication and fixed in iOS 17.3 and iPadOS 17.3. Affected versions are prior to 17.3. Remediation: update to i...

CVE-2024-23204

CVE-2024-23204 affects macOS Shortcuts (and related OSes) with a root cause of insufficient permissions checks that could allow a shortcut to access sensitive data via certain actions without prompting the user. The issue is fixed in macOS Sonoma 14.3 and across watchOS 10.3, iOS 17.3 and iPadOS ...

CVE-2024-23212

The issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.5 and iPadOS 16.7.5, iOS 17.3 and iPadOS 17.3, macOS Monterey 12.7.3, macOS Sonoma 14.3, macOS Ventura 13.6.4, tvOS 17.3, watchOS 10.3. An app may be able to execute arbitrary code with kernel privileges...

CVE-2024-23212

CVE-2024-23212 is a memory handling issue that could allow an app to execute arbitrary code with kernel privileges. Affected Apple platforms include watchOS 10.3, tvOS 17.3, iOS 17.3 / iPadOS 17.3, macOS Sonoma 14.3, macOS Ventura 13.6.4, macOS Monterey 12.7.3, and iOS/iPadOS 16.7.5 or 17.3 depen...

CVE-2024-23212

The issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.5 and iPadOS 16.7.5, iOS 17.3 and iPadOS 17.3, macOS Monterey 12.7.3, macOS Sonoma 14.3, macOS Ventura 13.6.4, tvOS 17.3, watchOS 10.3. An app may be able to execute arbitrary code with kernel privileges...

CVE-2024-23208

The issue was addressed with improved memory handling. This issue is fixed in iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, tvOS 17.3, watchOS 10.3. An app may be able to execute arbitrary code with kernel privileges...

CVE-2024-23208

CVE-2024-23208 affects Apple’s kernel memory handling and can enable an app to execute arbitrary code with kernel privileges. Publicly documented fixes apply to macOS Sonoma 14.3, watchOS 10.3, tvOS 17.3, iOS 17.3 and iPadOS 17.3. The Apple IOS 17.3 advisory confirms the Kernel impact and the mem...

CVE-2024-23213

The issue was addressed with improved memory handling. This issue is fixed in Safari 17.3, iOS 16.7.5 and iPadOS 16.7.5, iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, tvOS 17.3, watchOS 10.3. Processing web content may lead to arbitrary code execution...

CVE-2024-23213

The issue was addressed with improved memory handling. This issue is fixed in Safari 17.3, iOS 16.7.5 and iPadOS 16.7.5, iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, tvOS 17.3, watchOS 10.3. Processing web content may lead to arbitrary code execution...

CVE-2024-23213

CVE-2024-23213 is a memory-handling vulnerability in WebKit (as used by WebKitGTK/WebKit in various OS ecosystems) that may allow arbitrary code execution when processing web content. Public disclosures in connected documents show fixes across multiple platforms: Apple family (watchOS/iOS/macOS/S...

CVE-2024-23213

The issue was addressed with improved memory handling. This issue is fixed in Safari 17.3, iOS 16.7.5 and iPadOS 16.7.5, iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, tvOS 17.3, watchOS 10.3. Processing web content may lead to arbitrary code execution...