CVE-2024-40783

CVE-2024-40783 involves an issue where data container access was restricted more strictly; the vulnerability could allow a malicious application to bypass Privacy preferences. Affected platforms include macOS Sonoma 14.6, macOS Monterey 12.7.6, and macOS Ventura 13.6.8. The description indicates ...

CVE-2024-40812

A logic issue was addressed with improved checks. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8, visionOS 1.3, watchOS 10.6. A shortcut may be able to bypass Internet permission requirements...

CVE-2024-40812

A logic issue was addressed with improved checks. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8, visionOS 1.3, watchOS 10.6. A shortcut may be able to bypass Internet permission requirements...

CVE-2024-40799

CVE-2024-40799 is an out-of-bounds read vulnerability fixed by Apple in multiple OS updates. Affected platforms include iOS 16.7.9 / 17.6, iPadOS 16.7.9 / 17.6, macOS Ventura 13.6.8, Monterey 12.7.6, macOS Sonoma 14.6, and the watchOS 10.6, tvOS 17.6, visionOS 1.3 lineups. The issue occurs when p...

CVE-2024-40803

A type confusion issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. An attacker may be able to cause unexpected app termination...

CVE-2024-27877

CVE-2024-27877 : A memory handling issue in macOS was fixed; when processing a maliciously crafted file, an attacker may trigger a denial of service or potentially disclose memory contents. The fix is in macOS Sonoma 14.6, macOS Monterey 12.7.6, and macOS Ventura 13.6.8. Affected behavior prior t...

CVE-2024-27877

The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents...

CVE-2024-40788

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8, tvOS 17.6, visionOS 1.3, watchOS 10.6. A local attacker may be able to cause unexpecte...

CVE-2024-40788

CVE-2024-40788 is a local, type-confusion vulnerability in memory handling that could allow a local attacker to cause an unexpected system shutdown . The vulnerability is fixed in: iOS/iPadOS 16.7.9 and 17.6, macOS Ventura 13.6.8, macOS Monterey 12.7.6, macOS Sonoma 14.6, and on watchOS 10.6, tvO...

CVE-2024-40788

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8, tvOS 17.6, visionOS 1.3, watchOS 10.6. A local attacker may be able to cause unexpecte...

CVE-2024-40823

The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. An app may be able to access user-sensitive data...

CVE-2024-40835

CVE-2024-40835 concerns a logic issue in Apple’s Shortcuts feature where a shortcut could access sensitive data with certain actions without prompting. Affected platforms include iOS 16.7.9 and iPadOS 16.7.9; iOS 17.6 and iPadOS 17.6; macOS Ventura 13.6.8; macOS Monterey 12.7.6; macOS Sonoma 14.6...

CVE-2024-40834

CVE-2024-40834 affects macOS where a shortcut may bypass sensitive Shortcuts app settings. The issue is addressed by adding an extra user-consent prompt and is fixed in macOS Sonoma 14.6, macOS Monterey 12.7.6, and macOS Ventura 13.6.8. For context, the initial documentation lists these patch lev...

CVE-2024-40802

The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. A local attacker may be able to elevate their privileges...

CVE-2024-27883

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. An app may be able to modify protected parts of the file system...

CVE-2024-40793

CVE-2024-40793 is an Apple vulnerability where vulnerable code was removed. It affects multiple Apple platforms and is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8, watchOS 10.6. The issue could allow an app to acc...

CVE-2024-40817

CVE-2024-40817 involves UI spoofing via a website that frames malicious content. The vulnerability is addressed by Apple with updates across macOS and Safari: macOS Sonoma 14.6, Safari 17.6, macOS Monterey 12.7.6, and macOS Ventura 13.6.8. Affected component is the UI handling in Safari/macOS whe...

CVE-2024-40817

The issue was addressed with improved UI handling. This issue is fixed in Safari 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. Visiting a website that frames malicious content may lead to UI spoofing...

CVE-2024-40817

The issue was addressed with improved UI handling. This issue is fixed in Safari 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. Visiting a website that frames malicious content may lead to UI spoofing...

CVE-2024-40821

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. Third party app extensions may not receive the correct sandbox restrictions...