CVE-2024-40840: Undefined Security Weakness

This issue was addressed through improved state management. This issue is fixed in iOS 18 and iPadOS 18. An attacker with physical access may be able to use Siri to access sensitive user data...

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS version 13.7, which stems from an application that may be able to access sensitive user data...

CVE-2024-44170: Undefined Security Weakness

A privacy issue was addressed by moving sensitive data to a more secure location. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15, watchOS 11. An app may be able to access user-sensitive data...

CVE-2024-44131: Improper Link Resolution Before File Access

This issue was addressed with improved validation of symlinks. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An app may be able to access sensitive user data...

CVE-2024-44153: Undefined Security Weakness

The issue was addressed with improved permissions logic. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7. An app may be able to access user-sensitive data...

CVE-2024-44177: Undefined Security Weakness

A privacy issue was addressed by removing sensitive data. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. An app may be able to access user-sensitive data...

CVE-2024-40842

An issue was addressed with improved validation of environment variables. This issue is fixed in macOS Sequoia 15. An app may be able to access user-sensitive data...

CVE-2024-44182

This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. An app may be able to access sensitive data logged when a shortcut fails to launch another app...

CVE-2024-44182

CVE-2024-44182 (Apple macOS) describes a local vulnerability where an app may access sensitive data logged when a shortcut fails to launch another app. Remediation is to upgrade affected macOS releases to macOS Ventura 13.7, macOS Sonoma 14.7, or macOS Sequoia 15, where the issue has been address...

CVE-2024-40790

The issue was addressed with improved handling of caches. This issue is fixed in visionOS 2. An app may be able to read sensitive data from the GPU memory...

CVE-2024-40790

CVE-2024-40790 affects Apple visionOS 2. The vulnerability stems from cache handling allowing an app to read sensitive data from GPU memory. Apple’s documentation states this is fixed in visionOS 2; remediation is updating to visionOS 2. No exploitation details are provided in the supplied docume...

CVE-2024-44184

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.7, iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sonoma 14.7, macOS Sequoia 15. An app may be able to access user-sensitive data...

CVE-2024-44184

CVE-2024-44184 is a permissions-related issue in Apple platforms. The vulnerability could allow an app to access user-sensitive data. Fixes are provided in macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15, and iOS/iPadOS 17.7 and 18. No exploit details are provided in the connected documen...

CVE-2024-44184

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. An app may be able to access user-sensitive data...

CVE-2024-40850

CVE-2024-40850 describes a file access issue corrected by improved input validation. The vulnerability affects multiple Apple platforms and versions, including macOS Ventura 13.7; iOS 17.7 and iPadOS 17.7; visionOS 2; watchOS 11; macOS Sequoia 15; iOS 18 and iPadOS 18; macOS Sonoma 14.7; and tvOS...

CVE-2024-40847

CVE-2024-40847 affects macOS: fixed via added code-signing restrictions in macOS Ventura 13.7, macOS Sonoma 14.7, and macOS Sequoia 15. The issue could allow an app to access sensitive user data, addressed by the patch. Connected sources (NVD/Red Hat/NCSC/Nessus/OpenVAS) reiterate the same remedi...

CVE-2024-44131

CVE-2024-44131 concerns Apple’s FileProvider symlink handling. The issue arises from improper validation of symlinks, enabling a malicious app running with elevated file operation privileges to access or exfiltrate data via symlink manipulation. Apple states fixes are in iOS 18, iPadOS 18, and ma...

PT-2024-29111 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Ventura 13.7.1 macOS versions prior to Sonoma 14.7.1 macOS versions prior to Sequoia 15 Description: A sandboxed application may be able to access sensitive user data due to insufficient checks. Recommendations: Update...

About the security content of macOS Sequoia 15

About the security content of macOS Sequoia 15 This document describes the security content of macOS Sequoia 15. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

PT-2024-31006

Name of the Vulnerable Software and Affected Versions iOS versions prior to 18 iPadOS versions prior to 18 watchOS versions prior to 11 macOS Sequoia versions prior to 15 Description A privacy issue was addressed by moving sensitive data to a more secure location. An app may be able to access...