CVE-2024-54508: Out-of-bounds Read

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.6, macOS Sequoia 15.2, tvOS 18.2, visionOS 2.2, watchOS 11.2. Processing maliciously crafted web content may lead to an unexpected process crash...

Apple macOS 安全漏洞

Apple macOS is a set of specialized operating systems developed for Mac computers by the American company Apple Apple. A security vulnerability exists in Apple macOS Sequoia versions prior to 15.2. An attacker can bypass kASLR by exploiting this vulnerability...

CVE-2024-54466

The CVE-2024-54466 entry describes an authorization issue in macOS where an encrypted volume could be accessed by another user without prompting for a password. The connected sources identify the affected products as macOS Sequoia 15.2, macOS Ventura 13.7.2, and macOS Sonoma 14.7.2, with the unde...

CVE-2024-54466

An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.2, macOS Ventura 13.7.2, macOS Sonoma 14.7.2. An encrypted volume may be accessed by a different user without prompting for the password...

CVE-2024-54489

A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.2, macOS Ventura 13.7.2, macOS Sonoma 14.7.2. Running a mount command may unexpectedly execute arbitrary code...

CVE-2024-54515

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.2. A malicious app may be able to gain root privileges...

CVE-2024-54515

CVE-2024-54515 is a macOS Sequoia 15.2 issue where a logic issue in SharedFileList could allow a malicious app to gain root privileges. The description notes an improvement in restrictions as the fix, and Apple lists macOS Sequoia 15.2 as the patched version. This CVE is corroborated by Apple’s s...

CVE-2024-54515

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.2. A malicious app may be able to gain root privileges...

CVE-2024-54493

This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.2. Privacy indicators for microphone access may be attributed incorrectly...

CVE-2024-54493

This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.2. Privacy indicators for microphone access may be attributed incorrectly...

CVE-2024-54493

CVE-2024-54493 corresponds to a privacy-indicator issue for microphone access in macOS prior to 15.2, resolved by improved state management. The affected product is macOS Sequoia, with the fix released in Sequoia 15.2. The root cause is described as incorrect attribution of microphone-access indi...

CVE-2024-54484

CVE-2024-54484 affects macOS Sequoia prior to 15.2. The issue was resolved by sanitizing logging, with the fix shipped in macOS Sequoia 15.2. Impact observed in the description indicates an app may access user-sensitive data. The available connected documents corroborate that the remediation is a...

CVE-2024-54484

The issue was resolved by sanitizing logging. This issue is fixed in macOS Sequoia 15.2. An app may be able to access user-sensitive data...

CVE-2024-54484

The issue was resolved by sanitizing logging. This issue is fixed in macOS Sequoia 15.2. An app may be able to access user-sensitive data...

CVE-2024-54492

A security vulnerability in Apple's Passwords component allows an attacker in a privileged network position to alter network traffic. This issue was addressed by implementing HTTPS when sending information over the network. The vulnerability affects visionOS 2.2 , iOS 18.2 , iPadOS 18.2 , iPadOS ...

CVE-2024-54502

CVE-2024-54502 is a WebKitGTK/WebKit-based issue where processing maliciously crafted web content could cause an unexpected process crash. Publicly provided connected documents confirm this CVE is discussed across multiple advisories and platforms, with fixes released in various vendor updates. A...

CVE-2024-54502

The issue was addressed with improved checks. This issue is fixed in watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, Safari 18.2, iOS 18.2 and iPadOS 18.2. Processing maliciously crafted web content may lead to an unexpected process crash...

CVE-2024-54534

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.6, macOS Sequoia 15.2, tvOS 18.2, visionOS 2.2, watchOS 11.2. Processing maliciously crafted web content may lead to memory corruption...

CVE-2024-44220

CVE-2024-44220 affects Apple macOS (Sequoia 15.2 and Sonoma 14.7.2) where parsing a maliciously crafted video file could cause an unexpected system termination due to a memory handling issue. The vulnerability is addressed via improved memory handling in the patched releases. Connected sources (R...

CVE-2024-44220

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2. Parsing a maliciously crafted video file may lead to unexpected system termination...