5178 matches found
CVE-2024-40792
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. A malicious app may be able to change network settings...
CVE-2024-27849
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15. An app may be able to read sensitive location information...
CVE-2024-27849
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15. An app may be able to read sensitive location information...
CVE-2024-40792
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. A malicious app may be able to change network settings...
CVE-2024-40855
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.1, macOS Sequoia 15, macOS Sonoma 14.7.1. A sandboxed app may be able to access sensitive user data...
CVE-2024-44145
CVE-2024-44145 affects macOS Sequoia 15, iOS 18, and iPadOS 18. The issue, tied to Sidecar, could allow a physically proximate attacker to bypass the Lock Screen due to a state-management flaw. Apple fixed the vulnerability in the indicated OS versions (Sequoia 15, iOS 18, iPadOS 18) through impr...
CVE-2024-44145
This issue was addressed through improved state management. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An attacker with physical access to a macOS device with Sidecar enabled may be able to bypass the Lock Screen...
CVE-2024-44145
This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15, iOS 18 and iPadOS 18. An attacker with physical access to a macOS device with Sidecar enabled may be able to bypass the Lock Screen...
CVE-2024-44144
A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7.1, tvOS 18, visionOS 2, watchOS 11. Processing a maliciously crafted file may lead to unexpected app termination...
CVE-2024-44144
The CVE-2024-44144 issue is a buffer overflow vulnerability in Apple platforms where insufficient size validation could be triggered by processing a malicious file. Root cause: improved size validation fixes the overflow. Affected products/versions are explicit in the sources: iOS 17.7.1 and iPad...
CVE-2024-40792
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. A malicious app may be able to change network settings...
CVE-2024-40792
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. A malicious app may be able to change network settings...
CVE-2024-40792
CVE-2024-40792 affects macOS, with a permissions issue that could allow a malicious app to change network settings. The vulnerability is addressed in macOS Sequoia (version 15); Appleās records indicate a fix via additional restrictions. Exploitation would be local (attack vector: LOCAL) with low...
CVE-2024-44155
CVE-2024-44155 affects Apple Safari and related OS components via a custom URL scheme handling issue. The root cause is improved input validation, addressing a vulnerability that could allow malicious web content to violate the iframe sandboxing policy. Public details indicate the fix is applied ...
CVE-2024-44155
A custom URL scheme handling issue was addressed with improved input validation. This issue is fixed in Safari 18, iOS 17.7.1 and iPadOS 17.7.1, macOS Sequoia 15, watchOS 11, iOS 18 and iPadOS 18. Maliciously crafted web content may violate iframe sandboxing policy...
CVE-2024-44122
A logic issue was addressed with improved checks. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. An application may be able to break out of its sandbox...
CVE-2024-44122
A logic issue was addressed with improved checks. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. An application may be able to break out of its sandbox...
CVE-2024-44122
CVE-2024-44122 is a logic-issue affecting macOS that could allow an application to break out of its sandbox. The provided sources confirm fixes in macOS Ventura 13.7.1, macOS Sequoia 15, and macOS Sonoma 14.7.1. The vulnerability is described as a sandbox-escape risk resolved by improved checks; ...