5177 matches found
CVE-2024-44169
CVE-2024-44169 – Apple OS memory handling issue impacted Apple operating systems (macOS, iOS, iPadOS, visionOS, watchOS, tvOS, macOS Sequoia/Sonoma). The issue is described as caused by memory handling that could allow an app to cause an unexpected system termination. Affected versions include ma...
CVE-2024-44128
CVE-2024-44128 concerns macOS security where an Automator Quick Action workflow may bypass Gatekeeper. The issue was addressed by adding an additional prompt for user consent and is fixed in macOS updates: Ventura 13.7, Sonoma 14.7, and Sequoia 15. The available connected documents indicate the v...
CVE-2024-44128
This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. An Automator Quick Action workflow may be able to bypass Gatekeeper...
CVE-2024-44190
CVE-2024-44190 describes a path handling issue in macOS that could allow an app to read arbitrary files. The root cause is insufficient validation in path handling, and Apple fixed this in macOS Ventura 13.7, macOS Sonoma 14.7, and macOS Sequoia 15. Remediation is to deploy the listed macOS updat...
CVE-2024-44190
A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. An app may be able to read arbitrary files...
CVE-2024-44191
This issue was addressed through improved state management. This issue is fixed in iOS 17.7 and iPadOS 17.7, Xcode 16, visionOS 2, watchOS 11, macOS Sequoia 15, iOS 18 and iPadOS 18, tvOS 18. An app may gain unauthorized access to Bluetooth...
CVE-2024-44129
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15, macOS Ventura 13.7. An app may be able to leak sensitive user information...
CVE-2024-44129
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15, macOS Ventura 13.7. An app may be able to leak sensitive user information...
CVE-2024-44191
CVE-2024-44191 affects Apple platforms and is tied to improper state management that could allow an app to gain unauthorized Bluetooth access. Connected sources confirm the issue is resolved in multiple Apple OS updates: iOS 17.7 and iPadOS 17.7, macOS Sequoia 15, iOS 18 and iPadOS 18, visionOS 2...
CVE-2024-44129
CVE-2024-44129 affects macOS Ventura 13.7 and macOS Sequoia 15. The issue could allow an app to leak sensitive user information due to insufficient checks. Apple fixed it in the listed releases by implementing improved checks. No exploitation status is provided in the connected documents. Remedia...
CVE-2024-44191
This issue was addressed through improved state management. This issue is fixed in Xcode 16, iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15, tvOS 18, visionOS 2, watchOS 11. An app may gain unauthorized access to Bluetooth...
CVE-2024-44187
A cross-origin issue existed with "iframe" elements. This was addressed with improved tracking of security origins. This issue is fixed in Safari 18, iOS 18 and iPadOS 18, macOS Sequoia 15, tvOS 18, visionOS 2, watchOS 11. A malicious website may exfiltrate data cross-origin...
CVE-2024-44187
Summary of CVE-2024-44187 (Cross-origin iframe data exfiltration) A cross-origin issue existed involving iframe elements in WebKitGTK/WebKit2GTK, allowing a malicious site to exfiltrate data across origins. The root cause is stated as inadequate tracking of security origins for iframes. Affected ...
CVE-2024-44187
A cross-origin issue existed with "iframe" elements. This was addressed with improved tracking of security origins. This issue is fixed in Safari 18, iOS 18 and iPadOS 18, macOS Sequoia 15, tvOS 18, visionOS 2, watchOS 11. A malicious website may exfiltrate data cross-origin...
CVE-2024-44168
A library injection issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. An app may be able to modify protected parts of the file system...
CVE-2024-44168
CVE-2024-44168 involves a library injection issue that could allow an app to modify protected parts of the file system. Public documents confirm the vulnerability affects macOS updates: Ventura 13.7, Sonoma 14.7, and Sequoia 15. The root cause is described as a library injection issue addressed b...
CVE-2024-44168
A library injection issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. An app may be able to modify protected parts of the file system...
CVE-2024-44152
CVE-2024-44152 affects macOS, with Apple stating a privacy issue where private data in log entries could be exposed. The root cause is improper redaction of user-sensitive information in logs, and the issue is addressed in macOS Sequoia 15. The vulnerability entry notes that an app may be able to...