CVE-2024-44213: Insecure Storage of Sensitive Information

An issue existed in the parsing of URLs. This issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. An attacker in a privileged network position may be able to leak sensitive user information...

CVE-2024-27849: Insertion of Sensitive Information into Log File

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15. An app may be able to read sensitive location information...

PT-2024-31116 · Apple · Macos Sequoia +1

Name of the Vulnerable Software and Affected Versions: macOS Sequoia versions prior to 15.1 Description: A privacy issue was addressed by improving private data redaction for log entries. This allows a user to potentially view sensitive user information. The issue was fixed in macOS Sequoia 15.1...

PT-2024-31121 · Apple · Macos Sequoia +1

Name of the Vulnerable Software and Affected Versions: macOS Sequoia versions prior to 15.1 Description: A privacy issue was addressed with improved private data redaction for log entries. An app may be able to access information about a user's contacts. Recommendations: For versions prior to 15....

PT-2024-31059 · Apple · Macos Sequoia +1

Name of the Vulnerable Software and Affected Versions: macOS Sequoia versions prior to 15.1 Description: This issue was addressed through improved state management. A person with physical access to a Mac may be able to bypass Login Window during a software update. Recommendations: For versions...

PT-2024-31042 · Apple · Macos Sequoia +1

Name of the Vulnerable Software and Affected Versions: macOS Sequoia versions prior to 15.1 Description: This issue was addressed with improved validation of symlinks. An app may be able to access user-sensitive data. Recommendations: For versions prior to 15.1, update to macOS Sequoia 15.1 to...

PT-2024-31052 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.1 Description: This issue was addressed through improved state management. An attacker with physical access to a Mac may be able to view protected content from the Login Window. Recommendations: For versions prior t...

PT-2024-31028 · Apple · Macos Sequoia +1

Name of the Vulnerable Software and Affected Versions: macOS Sequoia versions prior to 15.1 Description: A logic issue was addressed with improved validation. This issue allows an app to potentially read arbitrary files. The estimated number of potentially affected devices worldwide is not...

CVE-2024-44122: Protection Mechanism Failure

A logic issue was addressed with improved checks. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. An application may be able to break out of its sandbox...

CVE-2024-44277: Out-of-bounds Write

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, tvOS 18.1, visionOS 2.1. An app may be able to cause unexpected system termination or corrupt kernel memory...

CVE-2024-44229: Undefined Security Weakness

An information leakage was addressed with additional validation. This issue is fixed in Safari 18.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, visionOS 2.1. Private browsing may leak some browsing history...

CVE-2024-40792: Incorrect Default Permissions

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. A malicious app may be able to change network settings...

CVE-2024-44285: Use After Free

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, tvOS 18.1, visionOS 2.1, watchOS 11.1. An app may be able to cause unexpected system termination or corrupt kernel memory...

CVE-2024-44208: Missing Authorization

This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15. An app may be able to bypass certain Privacy preferences...

CVE-2024-44203: Undefined Security Weakness

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. An app may be able to access a user's Photos Library...

CVE-2024-44123: Undefined Security Weakness

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. A malicious app with root privileges may be able to access keyboard input and location information without user consent...

CVE-2024-44280: Undefined Security Weakness

A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. An app may be able to modify protected parts of the file system...

CVE-2024-44270: Incorrect Authorization

A logic issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. A sandboxed process may be able to circumvent sandbox restrictions...

PT-2024-41823

Name of the Vulnerable Software and Affected Versions macOS versions prior to 15.1 Description A permissions issue allowed an application to access Contacts without user consent. This was addressed with additional restrictions. Recommendations Update to macOS version 15.1 or later...

PT-2024-41824

Name of the Vulnerable Software and Affected Versions macOS versions prior to 15.1 Description A flaw allows a local attacker with physical access to inject keyboard events into applications running on a locked device. This was addressed through improved state management. Recommendations Update t...