CVE-2024-54558

CVE-2024-54558 describes a clickjacking issue related to out-of-process view handling. The flaw could allow an app to trick a user into granting access to the Photos Library. It affects Apple platforms and is fixed in macOS Sequoia 15, iOS 18, and iPadOS 18. The CVE’s base metrics show a low seve...

CVE-2024-54558

A clickjacking issue was addressed with improved out-of-process view handling. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An app may be able to trick a user into granting access to photos from the user's photo library...

CVE-2024-54558

A clickjacking issue was addressed with improved out-of-process view handling. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An app may be able to trick a user into granting access to photos from the user's photo library...

CVE-2024-44179

CVE-2024-44179 affects Apple devices running iOS 17.7/iPadOS 17.7, iOS 18, and iPadOS 18, plus macOS Sequoia 15. The issue arises from restrictions on options offered on a locked device, potentially allowing an attacker with physical access to read contact numbers from the lock screen. Apple fixe...

CVE-2024-44179

This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15. An attacker with physical access to a device may be able to read contact numbers from the lock screen...

CVE-2024-44227

The issue was addressed with improved memory handling. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An app may be able to cause unexpected system termination or corrupt kernel memory...

CVE-2024-44227

The issue was addressed with improved memory handling. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An app may be able to cause unexpected system termination or corrupt kernel memory...

CVE-2024-44227

CVE-2024-44227 affects Apple platforms and is tied to memory handling implementations. The description indicates that an app may cause unexpected system termination or kernel memory corruption, with the root cause described as improved memory handling in the fix. The vulnerability is addressed in...

CVE-2024-54560

CVE-2024-54560 is a logic issue addressed by Apple across multiple platforms. According to connected sources, the vulnerability could allow a malicious application to modify other apps without the App Management permission. The fix is included in macOS Sequoia 15, iOS 18, iPadOS 18, watchOS 11, a...

CVE-2024-54469

The issue was addressed with improved checks. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7, visionOS 2. A local user may be able to leak sensitive user information...

CVE-2024-54469

The issue was addressed with improved checks. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7, visionOS 2. A local user may be able to leak sensitive user information...

CVE-2024-54469

CVE-2024-54469 is an Apple macOS/iOS/iPadOS/visionOS vulnerability where improved checks fixed a local information-leak issue. Affected platforms include macOS Ventura 13.7, macOS Sequoia 15, macOS Sonoma 14.7, visionOS 2, iOS 18 and iPadOS 18. The vulnerability allows a local user to leak sensit...

Apple iOS和Apple iPadOS 缓冲区错误漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A buffer error vulnerability exists in Apple iOS and Apple iPadOS that stems from an out-of-bounds write issue that could...

Exploit for Integer Overflow or Wraparound in Apple Ipados

Trigon Trigon is a deterministic kernel exploit based on CVE-...

The vulnerability of the IOMobileFrameBuffer component in operating systems such as MacOs, tvOs, watchOs, iPadOs, and iOS allows a perpetrator to influence data integrity.

The vulnerability of the IOMobileFrameBuffer component in operating systems such as MacOs, tvOS, watchOS, iPadOS, and iOS lies in reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to compromise data integrity...

The vulnerability of the Kernel component in operating systems such as MacOs, iPadOS, iOS, watchOS, and tvOS allows attackers to elevate their privileges to a root level.

The vulnerability of the Kernel component in macOS, iPadOS, iOS, watchOS, and tvOS is related to permission handling errors. Exploiting this vulnerability can allow an attacker to elevate their privileges to a root level...

CVE-2025-24200

An authorization issue was addressed with improved state management. This issue is fixed in iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.1 and iPadOS 18.3.1, iPadOS 17.7.5. A physical attack may disable USB Restricted Mode on a locked device. Apple is aware of a report...

CVE-2024-27859

The issue was addressed with improved memory handling. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, watchOS 10.4. Processing web content may lead to arbitrary code execution...

Apple Confirms ‘Extremely Sophisticated’ Exploit Threatening iOS Security

Apple fixes the USB Restricted Mode flaw in iOS 18.3.1 and iPadOS 18.3.1. Vulnerability exploited in targeted attacks.…...

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2025-24200link is external Apple iOS and iPadOS Incorrect Authorization Vulnerability CVE-2024-41710link is external Mitel SIP Phones Argument Injection Vulnerabili...