CVE-2024-27838: Improper Neutralization of Input During Web Page Generation

The issue was addressed by adding additional logic. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2, watchOS 10.5. A maliciously crafted webpage may be able to fingerprint the user...

CVE-2024-27812: Uncontrolled Resource Consumption

A logic issue was addressed with improved file handling. This issue is fixed in visionOS 1.2. Processing web content may lead to a denial-of-service...

CVE-2024-27815: Out-of-bounds Write

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2, watchOS 10.5. An app may be able to execute arbitrary code with kernel privileges...

CVE-2024-27844: Undefined Security Weakness

The issue was addressed with improved checks. This issue is fixed in Safari 17.5, macOS Sonoma 14.5, visionOS 1.2. A website's permission dialog may persist after navigation away from the site...

CVE-2024-27820: Improper Restriction of Operations within the Bounds of a Memory Buffer

The issue was addressed with improved memory handling. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2, watchOS 10.5. Processing web content may lead to arbitrary code execution...

CVE-2024-27830: Undefined Security Weakness

This issue was addressed through improved state management. This issue is fixed in Safari 17.5, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2, watchOS 10.5. A maliciously crafted webpage may be able to fingerprint the user...

About the security content of visionOS 1.2

About the security content of visionOS 1.2 This document describes the security content of visionOS 1.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are availabl...

CVE-2024-27804: Allocation of Resources Without Limits or Throttling

The issue was addressed with improved memory handling. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.3, watchOS 10.5. An app may be able to cause unexpected system termination...

PT-2024-4843 · Apple · Macos Sonoma +4

Name of the Vulnerable Software and Affected Versions: visionOS versions prior to 1.2 macOS Sonoma versions prior to 14.5 iOS versions prior to 17.5 iPadOS versions prior to 17.5 Description: The issue is related to the ImageIO component and is caused by a buffer overflow when processing a...

PT-2024-22042 · Apple · Macos Monterey +8

Name of the Vulnerable Software and Affected Versions: macOS Ventura versions 13.6.7 and earlier macOS Monterey versions 12.7.5 and earlier iOS versions 16.7.8 and earlier, 17.5 and earlier iPadOS versions 16.7.8 and earlier, 17.5 and earlier tvOS version 17.5 and earlier visionOS version 1.2 and...

PT-2024-22044

Name of the Vulnerable Software and Affected Versions macOS Ventura versions prior to 13.6.7 macOS Monterey versions prior to 12.7.5 iOS versions prior to 16.7.8 iPadOS versions prior to 16.7.8 tvOS versions prior to 17.5 visionOS versions prior to 1.2 iOS versions prior to 17.5 iPadOS versions...

PT-2024-22081 · Apple · Macos Sonoma +5

Name of the Vulnerable Software and Affected Versions: visionOS versions prior to 1.2 macOS Sonoma versions prior to 14.5 Safari versions prior to 17.5 iOS versions prior to 17.5 iPadOS versions prior to 17.5 Description: A maliciously crafted webpage may be able to fingerprint the user due to an...

PT-2024-22063 · Apple · Ipados +5

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.6.8 macOS Sonoma versions prior to 14.5 macOS Monterey versions prior to 12.7.6 watchOS versions prior to 10.5 visionOS versions prior to 1.3 tvOS versions prior to 17.5 iOS versions prior to 17.5 iPadOS versions...

PT-2024-22051 · Apple · Macos Sonoma +6

Name of the Vulnerable Software and Affected Versions: Apple tvOS versions prior to 17.5 Apple visionOS versions prior to 1.2 Apple iOS versions prior to 17.5 Apple iPadOS versions prior to 17.5 Apple watchOS versions prior to 10.5 Apple macOS Sonoma versions prior to 14.5 Description: The issue...

PT-2024-22060

Name of the Vulnerable Software and Affected Versions macOS Sonoma versions prior to 14.5 iOS versions prior to 16.7.8 iPadOS versions prior to 16.7.8 macOS Ventura versions prior to 13.6.7 watchOS versions prior to 10.5 visionOS versions prior to 1.3 tvOS versions prior to 17.5 iOS versions prio...

PT-2024-22056

Name of the Vulnerable Software and Affected Versions macOS Ventura versions prior to 13.6.7 macOS Monterey versions prior to 12.7.5 iOS versions prior to 16.7.8 iPadOS versions prior to 16.7.8 tvOS versions prior to 17.5 visionOS versions prior to 1.2 iOS versions prior to 17.5 iPadOS versions...

PT-2024-22078 · Apple · Macos Sonoma +3

Name of the Vulnerable Software and Affected Versions: visionOS versions prior to 1.2 macOS Sonoma versions prior to 14.5 Safari versions prior to 17.5 Description: The issue allows a website's permission dialog to persist after navigation away from the site. This was addressed with improved...

PT-2024-22082

Name of the Vulnerable Software and Affected Versions Safari versions prior to 17.5 tvOS versions prior to 17.5 visionOS versions prior to 1.2 iOS versions prior to 17.5 iPadOS versions prior to 17.5 watchOS versions prior to 10.5 macOS Sonoma versions prior to 14.5 Description The issue was...

PT-2025-2396

Name of the Vulnerable Software and Affected Versions: macOS Sonoma versions prior to 14.5 iOS versions prior to 16.7.8 and prior to 17.5 iPadOS versions prior to 16.7.8 and prior to 17.5 Safari versions prior to 17.5 watchOS versions prior to 10.5 tvOS versions prior to 17.5 visionOS versions...

Ubuntu 22.04 LTS / 23.10 : WebKitGTK vulnerabilities (USN-6732-1)

The remote Ubuntu 22.04 LTS / 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6732-1 advisory. Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a...