CVE-2024-44296

CVE-2024-44296 affects the WebKitGTK/WebKit2GTK components used by Linux desktop stacks (webkitgtk/webkit2gtk). The vulnerability allows processing malicious web content to bypass Content Security Policy enforcement. Connected advisories show fixes across distros (e.g., Debian: webkit2gtk 2.46.3-...

CVE-2024-44296

The issue was addressed with improved checks. This issue is fixed in Safari 18.1, iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, tvOS 18.1, visionOS 2.1, watchOS 11.1. Processing maliciously crafted web content may prevent Content Security Policy from being enforced...

CVE-2024-44255

A path handling issue was addressed with improved logic. This issue is fixed in visionOS 2.1, iOS 18.1 and iPadOS 18.1, macOS Ventura 13.7.1, macOS Sonoma 14.7.1, watchOS 11.1, tvOS 18.1. A malicious app may be able to run arbitrary shortcuts without user consent...

CVE-2024-44255

CVE-2024-44255 is a path handling issue addressed by Apple in versions listed as fixed: visionOS 2.1, iOS 18.1 / iPadOS 18.1, macOS Ventura 13.7.1, macOS Sonoma 14.7.1, watchOS 11.1, and tvOS 18.1. The issue allowed a malicious app to run arbitrary shortcuts without user consent due to improved p...

CVE-2024-44255

A path handling issue was addressed with improved logic. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1, tvOS 18.1, visionOS 2.1, watchOS 11.1. A malicious app may be able to run arbitrary shortcuts without user consent...

PT-2024-31027 · Apple · Visionos +4

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 11.1 visionOS versions prior to 2.1 iOS versions prior to 18.1 iPadOS versions prior to 18.1 Description: The issue allows an app to potentially access sensitive user data due to inadequate redaction of sensitive...

PT-2024-31062 · Apple · Ipados +5

Name of the Vulnerable Software and Affected Versions: macOS Sonoma versions prior to 14.7.1 macOS Ventura versions prior to 13.7.1 visionOS versions prior to 2.1 watchOS versions prior to 11.1 tvOS versions prior to 18.1 iOS versions prior to 17.7.1 and prior to 18.1 iPadOS versions prior to...

PT-2025-3045 · Apple · Visionos +4

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 11.1 visionOS versions prior to 2.1 iOS versions prior to 18.1 iPadOS versions prior to 18.1 Description: A path handling issue was addressed with improved logic. An attacker with access to calendar data could also...

PT-2024-31098

Name of the Vulnerable Software and Affected Versions iOS versions prior to 17.7.1 iOS versions prior to 18.1 iPadOS versions prior to 17.7.1 iPadOS versions prior to 18.1 watchOS versions prior to 11.1 Description The issue allows an attacker with physical access to a locked device to view...

PT-2024-31060 · Apple · Ipados +5

Name of the Vulnerable Software and Affected Versions: macOS Sonoma versions prior to 14.7.1 macOS Ventura versions prior to 13.7.1 visionOS versions prior to 2.1 watchOS versions prior to 11.1 tvOS versions prior to 18.1 iOS versions prior to 17.7.1 and prior to 18.1 iPadOS versions prior to...

PT-2024-36386 · Apple · Macos Sonoma +7

Name of the Vulnerable Software and Affected Versions: visionOS versions prior to 2.1 iOS versions prior to 18.1 iPadOS versions prior to 18.1 iOS versions prior to 17.7.1 iPadOS versions prior to 17.7.1 tvOS versions prior to 18.1 macOS Sonoma versions prior to 14.7.1 watchOS versions prior to...

PT-2024-31106

Name of the Vulnerable Software and Affected Versions Apple tvOS versions prior to 18.1 Apple iOS versions prior to 18.1 Apple iOS versions prior to 17.7.1 Apple iPadOS versions prior to 18.1 Apple iPadOS versions prior to 17.7.1 Apple macOS Ventura versions prior to 13.7.1 Apple macOS Sonoma...

PT-2024-31126

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 18.1 Apple iOS versions prior to 17.7.1 Apple iPadOS versions prior to 18.1 Apple iPadOS versions prior to 17.7.1 Apple tvOS versions prior to 18.1 Apple macOS Ventura versions prior to 13.7.1 Apple macOS Sonoma...

CVE-2024-44240: Undefined Security Weakness

The issue was addressed with improved checks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1, tvOS 18.1, visionOS 2.1, watchOS 11.1. Processing a maliciously crafted font may result in the disclosure of...

CVE-2024-44302: Undefined Security Weakness

The issue was addressed with improved checks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1, tvOS 18.1, visionOS 2.1, watchOS 11.1. Processing a maliciously crafted font may result in the disclosure of...

CVE-2024-44297: Undefined Security Weakness

The issue was addressed with improved bounds checks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1, tvOS 18.1, visionOS 2.1, watchOS 11.1. Processing a maliciously crafted message may lead to a...

CVE-2024-44274: Undefined Security Weakness

The issue was addressed with improved authentication. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, watchOS 11.1. An attacker with physical access to a locked device may be able to view sensitive user information...

CVE-2024-44269: Undefined Security Weakness

A logic issue was addressed with improved checks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1, visionOS 2.1, watchOS 11.1. A malicious app may use shortcuts to access restricted files...

CVE-2024-44215: Undefined Security Weakness

This issue was addressed with improved checks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1, tvOS 18.1, visionOS 2.1, watchOS 11.1. Processing an image may result in disclosure of process memory...

CVE-2024-44155: Undefined Security Weakness

A custom URL scheme handling issue was addressed with improved input validation. This issue is fixed in Safari 18, iOS 17.7.1 and iPadOS 17.7.1, iOS 18 and iPadOS 18, macOS Sequoia 15, watchOS 11. Maliciously crafted web content may violate iframe sandboxing policy...