CVE-2024-44165

CVE-2024-44165 is a logic-issue vulnerability fixed by Apple in multiple OS updates. It allows network traffic to leak outside a VPN tunnel. Affected are macOS: Ventura 13.7; Sonoma 14.7; Sequoia 15; iOS/iPadOS: 17.7, 18; and visionOS 2. Root cause described as a logic issue addressed with improv...

CVE-2024-40825

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15, visionOS 2. A malicious app with root privileges may be able to modify the contents of system files...

CVE-2024-40825

CVE-2024-40825 affects Apple Vision Pro’s visionOS (APFS) and macOS Sequoia; root cause described as inadequate checks that could let a malicious, root-privileged app modify system files. Official sources confirm fixes in visionOS 2 and macOS Sequoia 15. Practical impact is local privilege abuse ...

CVE-2024-40825

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15, visionOS 2. A malicious app with root privileges may be able to modify the contents of system files...

CVE-2024-44132

CVE-2024-44132 is a macOS sandbox escape issue resolved in macOS Sequoia 15. The vulnerability arises from improper handling of symlinks, enabling a sandboxed app to break out of its confinement. Public references (NVD, NCSC advisories, Red Hat RH security) corroborate the same description and fi...

CVE-2024-44132

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15. An app may be able to break out of its sandbox...

CVE-2024-44132

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15. An app may be able to break out of its sandbox...

CVE-2024-44153

The issue was addressed with improved permissions logic. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7. An app may be able to access user-sensitive data...

CVE-2024-40844

A privacy issue was addressed with improved handling of temporary files. This issue is fixed in iOS 17.7 and iPadOS 17.7, macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. An app may be able to observe data displayed to the user by Shortcuts...

CVE-2024-40844

CVE-2024-40844 describes a privacy issue where an app may observe data displayed to the user by Shortcuts due to improved handling of temporary files. The issue affects Apple platforms and is fixed in iOS 17.7, iPadOS 17.7, macOS Ventura 13.7, macOS Sonoma 14.7, and macOS Sequoia 15. The underlyi...

CVE-2024-44153

CVE-2024-44153 affects macOS; Apple reports that an app may be able to access user-sensitive data due to a permissions logic issue. The vulnerability is addressed in macOS Sonoma 14.7 and macOS Sequoia 15. Affected products/versions are macOS Sonoma 14.7 and later, and macOS Sequoia 15. Remediati...

CVE-2024-44153

The issue was addressed with improved permissions logic. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7. An app may be able to access user-sensitive data...

CVE-2024-40844

A privacy issue was addressed with improved handling of temporary files. This issue is fixed in iOS 17.7 and iPadOS 17.7, macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. An app may be able to observe data displayed to the user by Shortcuts...

CVE-2024-44186

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15. An app may be able to access protected user data...

CVE-2024-44186

CVE-2024-44186 is an access issue that was addressed with additional sandbox restrictions in macOS Sequoia 15. The description states that an app may be able to access protected user data and that the fix is included in Sequoia 15. Connected documents corroborate this vulnerability affecting macO...

CVE-2024-44186

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15. An app may be able to access protected user data...

CVE-2024-44169

The issue was addressed with improved memory handling. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7, tvOS 18, visionOS 2, watchOS 11. An app may be able to cause unexpected system termination...

CVE-2024-44169

Apple has addressed a memory handling issue in several of its operating systems. The vulnerability allows an app to cause unexpected system termination . Affected products and versions include iOS 17.7 , iPadOS 17.7 , iOS 18 , iPadOS 18 , macOS Sequoia 15 , macOS Sonoma 14.7 , macOS Ventura 13.7 ...

CVE-2024-44128

This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. An Automator Quick Action workflow may be able to bypass Gatekeeper...

CVE-2024-44128

CVE-2024-44128 concerns macOS security where an Automator Quick Action workflow may bypass Gatekeeper. The issue was addressed by adding an additional prompt for user consent and is fixed in macOS updates: Ventura 13.7, Sonoma 14.7, and Sequoia 15. The available connected documents indicate the v...