Vulnerabilities

TI-2024-36613 CVE-2024-54539 · GHSA-rr66-34m4-m7ww

Apple macOS: An app may be able to capture keyboard events from the lock screen

LOW 24

This issue was addressed through improved state management.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00201 Published 2025-01-27 Fixed in 13.7.2, 14.7.2 +1

TI-2024-36566 CVE-2024-54488 · GHSA-q7g4-2c4x-wxxq

LOW 25

A logic issue was addressed with improved file handling.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00518 Published 2025-01-27 Fixed in 18.2, 17.7.3 +3 CWE-863

TI-2024-36558 CVE-2024-54475 · GHSA-chv5-gcx2-vw99

LOW 15

A privacy issue was addressed with improved private data redaction for log entries.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00197 Published 2025-01-27 Fixed in 13.7.2, 14.7.2 +1 CWE-200

TI-2024-36619 CVE-2024-54547 · GHSA-cj6v-hrvw-6rqm

LOW 24

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.0021 Published 2025-01-27 Fixed in 13.7.2, 14.7.2 +1 CWE-200

TI-2024-36611 CVE-2024-54537 · GHSA-634j-pq2q-xq7j

LOW 37

This issue was addressed with additional entitlement checks.

CVSS 3.1HIGH 8.2 Local No auth User interaction EPSS 0.00201 Published 2025-01-27 Fixed in 13.7.2, 14.7.2 +1

TI-2024-36552 CVE-2024-54468 · GHSA-3vgp-qmq6-gqh6

LOW 37

The issue was addressed with improved checks.

CVSS 3.1HIGH 8.2 Local No auth User interaction EPSS 0.00199 Published 2025-01-27 Fixed in 18.2, 17.7.3 +4

TI-2024-36625 CVE-2024-54557 · GHSA-q965-9jfq-2h9g

LOW 39

A logic issue was addressed with improved restrictions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00525 Published 2025-01-27 Fixed in 13.7.2, 14.7.2 +1 CWE-281

TI-2024-36615 CVE-2024-54541 · GHSA-2xvj-j4wx-pf4c

LOW 24

This issue was addressed through improved state management.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00205 Published 2025-01-27 Fixed in 18.2, 13.7.2 +4 CWE-922

TI-2024-36596 CVE-2024-54520 · GHSA-25gv-4h88-97v2

LOW 24

A path handling issue was addressed with improved validation.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00229 Published 2025-01-27 Fixed in 13.7.2, 14.7.2 +1 CWE-787