CVE-2024-40857

CVE-2024-40857 affects Apple platforms using WebKit: a web content processing flaw that could lead to universal cross-site scripting. The issue was addressed through improved state management and is fixed in Safari 18, visionOS 2, watchOS 11, macOS Sequoia 15, iOS 18, iPadOS 18, and tvOS 18 per t...

CVE-2024-40831

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. An app may be able to access a user's Photos Library...

CVE-2024-40831

CVE-2024-40831 is a macOS Sequoia 15–only issue: a permissions flaw could allow an app to access a user’s Photos Library. Apple patched this in macOS Sequoia 15 (and related advisories confirm the risk was addressed with additional restrictions). The available documents consistently describe the ...

CVE-2024-40831

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. An app may be able to access a user's Photos Library...

CVE-2024-40866

The issue was addressed with improved UI. This issue is fixed in Safari 18, macOS Sequoia 15. Visiting a malicious website may lead to address bar spoofing...

CVE-2024-40866

The issue was addressed with improved UI. This issue is fixed in Safari 18, macOS Sequoia 15. Visiting a malicious website may lead to address bar spoofing...

CVE-2024-40866

The issue was addressed with improved UI. This issue is fixed in Safari 18, macOS Sequoia 15. Visiting a malicious website may lead to address bar spoofing...

CVE-2024-40866

CVE-2024-40866 affects WebKitGTK/WebKit2GTK. Visiting a malicious website may lead to address bar spoofing. Public advisories confirm fixes via package updates across distros: Debian (2.46.0-2~deb12u1 for bookworm; newer LTS entries exist), AlmaLinux 8/9 webkit2gtk3 advisories, Fedora package-ann...

CVE-2024-44130

This issue was addressed with improved data protection. This issue is fixed in macOS Sequoia 15. An app with root privileges may be able to access private information...

CVE-2024-44130

CVE-2024-44130 affects macOS and was fixed in macOS Sequoia 15. The issue permits a root-privileged app to access private information due to inadequate data protection. The vulnerability is addressed with improved data protection measures in Sequoia 15. Evidence from multiple connected sources co...

CVE-2024-44130

This issue was addressed with improved data protection. This issue is fixed in macOS Sequoia 15. An app with root privileges may be able to access private information...

CVE-2024-44167

The CVE-2024-44167 issue involves a vulnerability in macOS/iOS variants where an app may overwrite arbitrary files. The root cause is described as being mitigated by removing the vulnerable code. Affected platforms include macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15, visionOS 2, iOS 1...

CVE-2024-44167

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7, visionOS 2. An app may be able to overwrite arbitrary files...

CVE-2024-44188

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. An app may be able to access protected user data...

CVE-2024-44188

CVE-2024-44188 is a permissions issue in macOS that could allow an app to access protected user data. The vulnerability is fixed in macOS Sequoia 15; older macOS versions are affected. Multiple connected sources (NVD, Red Hat, Apple advisories, Nessus plugin notes, and PT Security) corroborate th...

CVE-2024-44188

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. An app may be able to access protected user data...

CVE-2024-27795

CVE-2024-27795 affects macOS Sequoia 15 where a permissions issue could allow a camera extension to access the Internet. Apple fixed this with additional restrictions in Sequoia 15; multiple sources consistently describe it as a permissions restriction issue resolved by a patch. Connected documen...

CVE-2024-27795

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. A camera extension may be able to access the internet...

CVE-2024-27795

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. A camera extension may be able to access the internet...

CVE-2024-44184

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. An app may be able to access user-sensitive data...