CVE-2024-27876

A race condition in the libAppleArchive component was addressed with improved locking. An attacker capable of providing a maliciously crafted archive may be able to write arbitrary files during the unpacking process. This vulnerability impacts iOS , iPadOS , macOS , and visionOS . Remediation is ...

CVE-2024-27876

A race condition was addressed with improved locking. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7, visionOS 2. Unpacking a maliciously crafted archive may allow an attacker to write arbitrary files...

CVE-2024-44158

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 17.7 and iPadOS 17.7, macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. A shortcut may output sensitive user data without consent...

CVE-2024-44158

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 17.7 and iPadOS 17.7, macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. A shortcut may output sensitive user data without consent...

CVE-2024-27860

The CVE-2024-27860 entry concerns a macOS Sequoia 15 vulnerability where an application may read restricted memory due to improper memory handling. The connected Red Hat, Nessus, CIRCL, and Apple security documents corroborate that issue was addressed by improved memory handling and is fixed in m...

CVE-2024-27860

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15. An application may be able to read restricted memory...

CVE-2024-27860

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15. An application may be able to read restricted memory...

CVE-2024-40770

CVE-2024-40770 is a macOS vulnerability describing a permissions issue that could allow a non-privileged user to modify restricted network settings. The vulnerability is addressed in macOS Sequoia 15, per NVD/NVD-derived entries and Apple security content references. Red Hat’s CVE page reiterates...

CVE-2024-40770

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. A non-privileged user may be able to modify restricted network settings...

CVE-2024-40770

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. A non-privileged user may be able to modify restricted network settings...

CVE-2024-44178

CVE-2024-44178 describes a vulnerability in macOS where insufficient validation of symlinks could allow an app to modify protected parts of the file system. The issue is fixed in macOS Ventura 13.7, macOS Sonoma 14.7, and macOS Sequoia 15, per the provided sources. The Red Hat and NVD entries con...

CVE-2024-44178

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. An app may be able to modify protected parts of the file system...

CVE-2024-44178

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. An app may be able to modify protected parts of the file system...

CVE-2024-40838

CVE-2024-40838 describes a privacy issue in macOS Sequoia 15 where sensitive data was moved to a protected location, potentially allowing a malicious app to access notifications from the user’s device. The NVD/NVD-derived entries confirm the issue is fixed in macOS Sequoia 15, with an impact prof...

CVE-2024-40838

A privacy issue was addressed by moving sensitive data to a protected location. This issue is fixed in macOS Sequoia 15. A malicious app may be able to access notifications from the user's device...

CVE-2024-40838

A privacy issue was addressed by moving sensitive data to a protected location. This issue is fixed in macOS Sequoia 15. A malicious app may be able to access notifications from the user's device...

CVE-2024-44181

The CVE-2024-44181 entry concerns macOS: an issue in handling of temporary files could allow an app to read sensitive location information. Affected products/versions are macOS Ventura 13.7, macOS Sonoma 14.7, and macOS Sequoia 15. The root cause is improved handling of temporary files (as descri...

CVE-2024-44181

An issue was addressed with improved handling of temporary files. This issue is fixed in macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. An app may be able to read sensitive location information...

CVE-2024-44154

CVE-2024-44154 affects macOS components (Apple Graphics Control entry in macOS Sonoma 14.7 and macOS Sequoia 15). The issue is described as a memory initialization problem addressed by improved memory handling, with the impact that processing a maliciously crafted file may cause an application to...

CVE-2024-44154

A memory initialization issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7. Processing a maliciously crafted file may lead to unexpected app termination...