CVE-2024-54477

CVE-2024-54477 affects macOS Sequoia 15.2, macOS Ventura 13.7.2, and macOS Sonoma 14.7.2. The issue is described as an access to user-sensitive data via a local issue with high confidentiality impact, low attack complexity, and no user interaction required (CVSS v3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/...

CVE-2024-54498

A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app may be able to break out of its sandbox...

CVE-2024-54498

A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app may be able to break out of its sandbox...

CVE-2024-54528

CVE-2024-54528 involves a logic issue in macOS where an app may overwrite arbitrary files. Connected sources confirm concrete remediation: Apple fixed the issue in macOS Sequoia 15.2, macOS Sonoma 14.7.2, and macOS Ventura 13.7.2. The underlying problem is described as a logic/restrictions issue,...

CVE-2024-54528

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app may be able to overwrite arbitrary files...

CVE-2024-54504

CVE-2024-54504 describes a privacy issue in macOS Sequoia where log entries could reveal user-sensitive data. The vulnerability is fixed in macOS Sequoia 15.2; update to Sequoia 15.2 or later to remediate. CVSS 3.1/3.1 metrics indicate a Local, Low-Complexity issue with Low Privileges, but High C...

CVE-2024-54504

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.2. An app may be able to access user-sensitive data...

CVE-2024-54504

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.2. An app may be able to access user-sensitive data...

CVE-2024-44291

A logic issue was addressed with improved file handling. This issue is fixed in macOS Sequoia 15.2, macOS Ventura 13.7.2, macOS Sonoma 14.7.2. A malicious app may be able to gain root privileges...

CVE-2024-44291

CVE-2024-44291 affects Apple macOS (Sequoia 15.2, Ventura 13.7.2, Sonoma 14.7.2). Description: a logic issue in improved file handling could allow a malicious app to gain root privileges. The connected sources confirm the root-privilege impact and list exact fixed versions, with no exploitation d...

CVE-2024-54531

CVE-2024-54531 affects macOS Sequoia 15.2 (and earlier) with a local, low-privilege vector. Root cause: improper memory handling that could enable bypass of kASLR. Impact: potential elevation of local privileges due to bypassing address space layout randomization. Remediation: Apple lists Sequoia...

CVE-2024-54531

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.2. An app may be able to bypass kASLR...

CVE-2024-54531

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.2. An app may be able to bypass kASLR...

CVE-2024-54474

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2, macOS Ventura 13.7.2, macOS Sonoma 14.7.2. An app may be able to access user-sensitive data...

CVE-2024-54474

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app may be able to access user-sensitive data...

CVE-2024-44224

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. A malicious app may be able to gain root privileges...

CVE-2024-44224

CVE-2024-44224 affects macOS Sequoia (15.2), Ventura (13.7.2), and Sonoma (14.7.2). The issue is a permissions flaw that could allow a malicious app to gain root privileges. The Red Hat and NVD entries corroborate a local, high-severity impact with a root privilege escalation vector, fixed in the...

CVE-2024-54526

The issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2, tvOS 18.2, watchOS 11.2. A malicious app may be able to access private information...

CVE-2024-54506

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.2. An attacker may be able to cause unexpected system termination or arbitrary code execution in DCP firmware...

CVE-2024-54506

CVE-2024-54506 affects macOS Sequoia prior to 15.2 due to an out-of-bounds access in DCP firmware. The issue can cause unexpected termination or arbitrary code execution if triggered. The NVD entry and Apple security content identify the fix as part of macOS Sequoia 15.2. Affected component is DC...