CVE-2024-40840

CVE-2024-40840 affects Apple iOS 18 and iPadOS 18. The issue arises from a state-management weakness that could allow an attacker with physical access to use Siri to access sensitive user data. Apple states the vulnerability is fixed in iOS 18 / iPadOS 18. Practical impact is limited to scenarios...

CVE-2024-40840

This issue was addressed through improved state management. This issue is fixed in iOS 18 and iPadOS 18. An attacker with physical access may be able to use Siri to access sensitive user data...

CVE-2024-40837

CVE-2024-40837 describes a local-permission issue where an app could access protected user data. The connected documents confirm the vulnerability is addressed in macOS Sequoia 15, providing the fix as part of the OS update. No exploit details, affected product scope beyond macOS Sequoia 15, or a...

CVE-2024-27858

CVE-2024-27858 is a local-privilege-permission issue in macOS that could allow an app to access protected user data. The vulnerability is fixed in macOS Sequoia 15 (per multiple sources including NVD/NVD-CVE, Red Hat advisory, and Apple security content). The root cause is described as a permissi...

CVE-2024-27858

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. An app may be able to access protected user data...

CVE-2024-44188

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. An app may be able to access protected user data...

CVE-2024-40847

The issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. An app may be able to access sensitive user data...

CVE-2024-40847

The issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. An app may be able to access sensitive user data...

CVE-2024-44131

This issue was addressed with improved validation of symlinks. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An app may be able to access sensitive user data...

CVE-2024-44131

This issue was addressed with improved validation of symlinks. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An app may be able to access sensitive user data...

PT-2024-31021 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Sequoia 15 Description: A permissions issue was addressed with additional restrictions. This issue allows an app to access protected user data. Recommendations: For versions prior to macOS Sequoia 15, update to macOS...

PT-2024-29114 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15 Description: A permissions issue was addressed with additional restrictions. This issue may allow an app to access user-sensitive data. Recommendations: For versions prior to 15, update to macOS Sequoia 15 to resolv...

PT-2024-31056 · Apple · Xcode +1

Name of the Vulnerable Software and Affected Versions: Xcode versions prior to 16 Description: The issue allows an app to potentially inherit Xcode permissions, enabling access to user data due to inadequate permissions checking. Recommendations: For versions prior to 16, update to Xcode 16 to...

PT-2024-22085 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15 Description: A permissions issue was addressed with additional restrictions. This issue allows an app to potentially access protected user data. Recommendations: For versions prior to 15, update to macOS Sequoia 15 ...

About the security content of macOS Sequoia 15

About the security content of macOS Sequoia 15 This document describes the security content of macOS Sequoia 15. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

PT-2024-31011 · Apple · Macos Sonoma +3

Name of the Vulnerable Software and Affected Versions: macOS Ventura versions prior to 13.7 macOS Sonoma versions prior to 14.7 macOS Sequoia versions prior to 15 Description: A privacy issue was addressed by removing sensitive data, which could allow an app to access user-sensitive data...

PT-2024-30985 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15 Description: A permissions issue was addressed with additional restrictions, which may have allowed an app to access protected user data. Recommendations: For versions prior to 15, update to macOS Sequoia 15 to...

PT-2024-31019 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Sequoia 15 Description: An access issue was addressed with additional sandbox restrictions. This issue allowed an app to potentially access protected user data. The problem was fixed by implementing more sandbox...

Ford wants to eavesdrop on passenger conversations to help target ads

Car manufacturer Ford Motor Company has filed a patent application for an in-vehicle advertisement presentation system based on information derived from several trip and driver characteristics. Among those characteristics—human conversations. In the abstract of the patent application publication...

CVE-2024-25270

An issue in Mirapolis LMS 4.6.XX allows authenticated users to exploit an Insecure Direct Object Reference IDOR vulnerability by manipulating the ID parameter and increment STEP parameter, leading to the exposure of sensitive user data...