CVE-2024-40775

CVE-2024-40775 describes a downgrade issue addressed by adding code-signing restrictions. The vulnerability could allow an app to leak sensitive user information. Apple fixed the issue in macOS Sonoma 14.6, macOS Monterey 12.7.6, and macOS Ventura 13.6.8. The provided connected documents confirm ...

CVE-2024-40807

A logic issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. A shortcut may be able to use sensitive data with certain actions without prompting the user...

CVE-2024-40807

A logic issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. A shortcut may be able to use sensitive data with certain actions without prompting the user...

CVE-2024-40807

CVE-2024-40807 addresses a logic issue that allowed a shortcut to access sensitive data via certain actions without user prompting. The connected sources identify the root cause as a logic issue, and specify the fix as implemented in macOS updates: Sonoma 14.6, Monterey 12.7.6, and Ventura 13.6.8...

CVE-2024-40796

Technical details about CVE-2024-40796 are not publicly provided in the supplied documents; the materials reference the fix in Apple OS versions but do not describe root cause, affected components, or exploit information. Monitor for updates.

CVE-2024-40796

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. Private browsing may leak some browsing history...

CVE-2024-40806

CVE-2024-40806 is an out-of-bounds read in Apple components fixed via input validation. Affected products include macOS (Ventura 13.6.8, Monterey 12.7.6, Sonoma 14.6), iOS/iPadOS (16.7.9, 17.6), watchOS 10.6, tvOS 17.6, and visionOS 1.3. The issue can crash apps when processing a malicious file; ...

CVE-2024-40806

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8, tvOS 17.6, visionOS 1.3, watchOS 10.6. Processing a maliciously crafted file may...

CVE-2024-40774

A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8, tvOS 17.6, watchOS 10.6. An app may be able to bypass Privacy preferences...

CVE-2024-40774

CVE-2024-40774 is a downgrade issue addressed by stricter code-signing restrictions. Affected platforms include macOS Ventura 13.6.8, Monterey 12.7.6, iOS 17.6/iPadOS 17.6, watchOS 10.6, tvOS 17.6, and macOS Sonoma 14.6; the flaw could allow an app to bypass Privacy preferences. Remediation is th...

CVE-2024-40774

A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8, tvOS 17.6, watchOS 10.6. An app may be able to bypass Privacy preferences...

CVE-2023-40398

This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.6.4, macOS Big Sur 11.7.5, macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4. A sandboxed process may be able to circumvent sandbox restrictions...

CVE-2023-40398

CVE-2023-40398 affects Apple macOS and iOS, with a sandbox bypass vector in a sandboxed process. The issue is fixed in macOS Monterey 12.6.4, Big Sur 11.7.5, Ventura 13.3, and iOS/iPadOS 16.4; Apple KBs HT213670/HT213677/HT213676/HT213675 document the patches. CVSS: 3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:...

PT-2024-29060 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.7.6 macOS versions prior to 13.6.8 macOS versions prior to 14.6 Description: The issue allows a local attacker to potentially elevate their privileges. It was addressed with improved checks. Recommendations: For mac...

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS Monterey versions prior to 12.7.6 that stems from a third-party application extension that may not be properly sandboxed...

PT-2024-22106 · Apple · Macos Monterey +3

Name of the Vulnerable Software and Affected Versions: macOS Sonoma versions prior to 14.6 macOS Monterey versions prior to 12.7.6 macOS Ventura versions prior to 13.6.8 Description: A privacy issue was addressed with improved private data redaction for log entries. An app may be able to access...

PT-2024-29057 · Apple · Macos Monterey +8

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.7.9 iPadOS versions prior to 16.7.9 macOS Ventura versions prior to 13.6.8 macOS Monterey versions prior to 12.7.6 iOS versions prior to 17.6 iPadOS versions prior to 17.6 watchOS versions prior to 10.6 tvOS versions...

PT-2024-29074 · Apple · Macos Monterey +4

Name of the Vulnerable Software and Affected Versions: macOS Sonoma versions prior to 14.6 Safari versions prior to 17.6 macOS Monterey versions prior to 12.7.6 macOS Ventura versions prior to 13.6.8 Description: The issue was addressed with improved UI handling. Visiting a website that frames...

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS Monterey versions prior to 12.7.6, which stems from the fact that visiting a website containing malicious content may result in UI...

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS Monterey prior to version 12.7.6, which originates from a local attacker who may cause the system to shut down unexpectedly...