Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS version 15, which originates from an application that may be able to access protected user data...

The vulnerability of the H5A__attr_release_table() function in the HDF5 library allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the H5Aattrreleasetable function in the HDF5 library is related to buffer overflow in the queue. Exploitation of this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the H5E_printf_stack() function in the H5Eint.c file of the HDF5 library allows a attacker to disclose protected information.

The vulnerability of the H5Eprintfstack function in the H5Eint.c file of the HDF5 library is related to an uncontrolled recursion. Exploiting this vulnerability could allow a remote attacker to disclose sensitive information that is protected by this function...

The vulnerability of the H5T__bit_find() function in the HDF5 library allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the H5Tbitfind function in the HDF5 library is related to buffer overflow in the queue. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-2024-44149

CVE-2024-44149 affects macOS, involving a permissions issue that could allow an app to access protected user data. The vulnerability is addressed in macOS Sequoia 15, per the initial description and the Apple advisory entries, which state the fix applies to Sequoia 15. Red Hat and NVD entries ech...

CVE-2024-44149

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. An app may be able to access protected user data...

CVE-2024-44149

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. An app may be able to access protected user data...

CVE-2024-44186

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15. An app may be able to access protected user data...

CVE-2024-44186

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15. An app may be able to access protected user data...

CVE-2024-44186

CVE-2024-44186 is an access issue that was addressed with additional sandbox restrictions in macOS Sequoia 15. The description states that an app may be able to access protected user data and that the fix is included in Sequoia 15. Connected documents corroborate this vulnerability affecting macO...

CVE-2024-44135

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7. An app may be able to access protected files within an App Sandbox container...

CVE-2024-40838

CVE-2024-40838 describes a privacy issue in macOS Sequoia 15 where sensitive data was moved to a protected location, potentially allowing a malicious app to access notifications from the user’s device. The NVD/NVD-derived entries confirm the issue is fixed in macOS Sequoia 15, with an impact prof...

CVE-2024-40801

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7. An app may be able to access protected user data...

CVE-2024-40801

CVE-2024-40801 describes a permissions issue in macOS that could allow an app to access protected user data. Technical detail across sources shows this is addressed by Apple in macOS Sonoma 14.7 and macOS Sequoia 15. The mitigation is upgrading to those respective versions or applying the provide...

CVE-2024-27858

CVE-2024-27858 is a local-privilege-permission issue in macOS that could allow an app to access protected user data. The vulnerability is fixed in macOS Sequoia 15 (per multiple sources including NVD/NVD-CVE, Red Hat advisory, and Apple security content). The root cause is described as a permissi...

PT-2024-31021 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Sequoia 15 Description: A permissions issue was addressed with additional restrictions. This issue allows an app to access protected user data. Recommendations: For versions prior to macOS Sequoia 15, update to macOS...

The vulnerability of the software for working with reports and data in the web environment of SAP Business Explorer’s BEx Web Java Runtime Export Web Service lies in errors in the processing of XML requests. This vulnerability allows attackers to compromise the confidentiality and accessibility of protected information.

The vulnerability of the software for working with reports and data in the web environment of SAP Business Explorer’s BEx Web Java Runtime Export Web Service is related to errors in processing XML requests. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and...

The vulnerability of the PowerScale OneFS operating system, related to the use of cryptographic algorithms containing defects, allows a perpetrator to disclose protected information.

The vulnerability of the PowerScale OneFS operating system is related to the use of cryptographic algorithms that contain defects. Exploiting this vulnerability allows a malicious actor to disclose the protected information...

PT-2024-31003 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7 macOS Sonoma versions prior to 14.7 macOS Sequoia versions prior to 15 Description: A library injection issue was addressed with additional restrictions. This issue allows an app to potentially modify protected...

PT-2024-29116 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14.7 macOS versions prior to 15 Description: A logic issue was addressed with improved checks, allowing an app to potentially modify protected parts of the file system. Recommendations: For macOS versions prior to 14.7...