CVE-2024-44134

This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15. An app may be able to read sensitive location information...

CVE-2024-44134

CVE-2024-44134 affects macOS Sequoia 15. An app may be able to read sensitive location information due to an issue related to redaction; Apple states the fix is in macOS Sequoia 15. The CVSSv3.1 vector indicates a local attacker with low complexity and low privileges, with high confidentiality im...

CVE-2024-44135

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.7, macOS Sequoia 15. An app may be able to access protected files within an App Sandbox container...

CVE-2024-44135

This CVE (CVE-2024-44135) concerns a permissions issue in macOS that could allow an app to access protected files inside an App Sandbox container. The vulnerability is fixed in macOS Sonoma 14.7 and macOS Sequoia 15; the underlying cause relates to insufficient permission restrictions, and the is...

CVE-2024-44135

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7. An app may be able to access protected files within an App Sandbox container...

CVE-2024-40859

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. An app may be able to access user-sensitive data...

CVE-2024-40859

CVE-2024-40859 describes a permissions issue in macOS Sequoia 15 where an app may be able to access user-sensitive data. The provided sources align on the root cause being insufficient restrictions that could allow data access, with the fix implemented in macOS Sequoia 15. Connected documents cor...

CVE-2024-40859

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. An app may be able to access user-sensitive data...

CVE-2024-27876

A race condition was addressed with improved locking. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7, visionOS 2. Unpacking a maliciously crafted archive may allow an attacker to write arbitrary files...

CVE-2024-27876

A race condition was addressed with improved locking. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7, visionOS 2. Unpacking a maliciously crafted archive may allow an attacker to write arbitrary files...

CVE-2024-27876

CVE-2024-27876 describes a race condition in Apple’s archive unpacking that could allow writing arbitrary files when a malicious archive is unpacked. The issue is addressed by improved locking and is fixed in: macOS Ventura 13.7; macOS Sonoma 14.7; macOS Sequoia 15; iOS 17.7 and iPadOS 17.7; iOS ...

CVE-2024-44158

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 17.7 and iPadOS 17.7, macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. A shortcut may output sensitive user data without consent...

CVE-2024-44158

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 17.7 and iPadOS 17.7, macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. A shortcut may output sensitive user data without consent...

CVE-2024-27860

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15. An application may be able to read restricted memory...

CVE-2024-27860

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15. An application may be able to read restricted memory...

CVE-2024-27860

The CVE-2024-27860 entry concerns a macOS Sequoia 15 vulnerability where an application may read restricted memory due to improper memory handling. The connected Red Hat, Nessus, CIRCL, and Apple security documents corroborate that issue was addressed by improved memory handling and is fixed in m...

CVE-2024-40770

CVE-2024-40770 is a macOS vulnerability describing a permissions issue that could allow a non-privileged user to modify restricted network settings. The vulnerability is addressed in macOS Sequoia 15, per NVD/NVD-derived entries and Apple security content references. Red Hat’s CVE page reiterates...

CVE-2024-40770

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. A non-privileged user may be able to modify restricted network settings...

CVE-2024-40770

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. A non-privileged user may be able to modify restricted network settings...

CVE-2024-44178

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. An app may be able to modify protected parts of the file system...