Vulnerabilities

TI-2024-18420 CVE-2024-27806 · GHSA-p457-rwhw-j6q4

Information disclosure in Apple iOS and iPadOS

LOW 24

This issue was addressed with improved environment sanitization.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00259 Published 2024-06-10 Fixed in 16.7.8, 17.5 +4 CWE-200

TI-2024-18492 CVE-2024-27885 · GHSA-j776-p2rm-mmrr

LOW 28

This issue was addressed with improved validation of symlinks.

CVSS 3.1MEDIUM 6.3 Local No auth User interaction EPSS 0.00268 Published 2024-06-10 Fixed in 12.7.5, 13.6.7 +1 CWE-59

TI-2024-18445 CVE-2024-27831 · GHSA-9p2j-9mm4-8r6m

MEDIUM 42

An out-of-bounds write issue was addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.003 Published 2024-06-10 Fixed in 16.7.8, 17.5 +4 CWE-786

TI-2024-18414 CVE-2024-27800 · GHSA-v8pv-8xhp-96rh

LOW 32

This issue was addressed by removing the vulnerable code.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00604 Published 2024-06-10 Fixed in 16.7.8, 17.5 +5 CWE-400

TI-2024-18431 CVE-2024-27817 · GHSA-gc92-5p58-4rf7

LOW 35

The issue was addressed with improved checks.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00181 Published 2024-06-10 Fixed in 16.7.8, 17.5 +4 CWE-353

TI-2024-18416 CVE-2024-27802 · GHSA-mxj9-494w-v3gp

LOW 36

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00418 Published 2024-06-10 Fixed in 16.7.8, 17.5 +4 CWE-787

TI-2024-18413 CVE-2024-27799 · GHSA-rfp9-6j63-rc88

LOW 16

This issue was addressed with additional entitlement checks.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00235 Published 2024-06-10 Fixed in 16.7.8, 12.7.5 +2

TI-2024-18419 CVE-2024-27805 · GHSA-6jq2-3f4f-qgw5

LOW 24

An issue was addressed with improved validation of environment variables.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00248 Published 2024-06-10 Fixed in 16.7.8, 17.5 +4 CWE-20