CVE-2024-44144

A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7.1, tvOS 18, visionOS 2, watchOS 11. Processing a maliciously crafted file may lead to unexpected app termination...

CVE-2024-44144

The CVE-2024-44144 issue is a buffer overflow vulnerability in Apple platforms where insufficient size validation could be triggered by processing a malicious file. Root cause: improved size validation fixes the overflow. Affected products/versions are explicit in the sources: iOS 17.7.1 and iPad...

CVE-2024-40792

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. A malicious app may be able to change network settings...

CVE-2024-40792

CVE-2024-40792 affects macOS, with a permissions issue that could allow a malicious app to change network settings. The vulnerability is addressed in macOS Sequoia (version 15); Apple’s records indicate a fix via additional restrictions. Exploitation would be local (attack vector: LOCAL) with low...

CVE-2024-40792

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. A malicious app may be able to change network settings...

CVE-2024-44155

CVE-2024-44155 affects Apple Safari and related OS components via a custom URL scheme handling issue. The root cause is improved input validation, addressing a vulnerability that could allow malicious web content to violate the iframe sandboxing policy. Public details indicate the fix is applied ...

CVE-2024-44155

A custom URL scheme handling issue was addressed with improved input validation. This issue is fixed in Safari 18, iOS 17.7.1 and iPadOS 17.7.1, macOS Sequoia 15, watchOS 11, iOS 18 and iPadOS 18. Maliciously crafted web content may violate iframe sandboxing policy...

CVE-2024-44122

A logic issue was addressed with improved checks. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. An application may be able to break out of its sandbox...

CVE-2024-44122

CVE-2024-44122 is a logic-issue affecting macOS that could allow an application to break out of its sandbox. The provided sources confirm fixes in macOS Ventura 13.7.1, macOS Sequoia 15, and macOS Sonoma 14.7.1. The vulnerability is described as a sandbox-escape risk resolved by improved checks; ...

CVE-2024-44122

A logic issue was addressed with improved checks. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. An application may be able to break out of its sandbox...

CVE-2024-44175

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7.1. An app may be able to access sensitive user data...

CVE-2024-44175

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7.1. An app may be able to access sensitive user data...

CVE-2024-44174

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15. An attacker may be able to view restricted content from the lock screen...

CVE-2024-44174

CVE-2024-44174 affects macOS, with the issue allowing an attacker to view restricted content from the lock screen. The initial description notes the vulnerability is addressed by improved checks and is fixed in macOS Sequoia 15. Connected sources (NVD/NBA Apple security content) corroborate this,...

CVE-2024-44174

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15. An attacker may be able to view restricted content from the lock screen...

CVE-2024-44123

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15, iOS 18 and iPadOS 18. A malicious app with root privileges may be able to access keyboard input and location information without user consent...

CVE-2024-44123

CVE-2024-44123 is a permissions-related issue affecting macOS Sequoia 15, iOS 18 and iPadOS 18. A malicious app with root privileges may access keyboard input and location information without user consent. The vulnerability is addressed in the specified OS updates (macOS Sequoia 15, iOS 18, iPadO...

CVE-2024-44123

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. A malicious app with root privileges may be able to access keyboard input and location information without user consent...

CVE-2024-40855

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7.1, macOS Ventura 13.7.1, visionOS 2. A sandboxed app may be able to access sensitive user data...

CVE-2024-40855

CVE-2024-40855 affects macOS (the specific entry notes a sandboxed app could access sensitive user data). The connected sources confirm the issue was addressed with improved checks and implemented as a fix in macOS Ventura 13.7.1, macOS Sequoia 15, and macOS Sonoma 14.7.1. The description does no...