Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

22 records

Release: Apple macOS 14.6 Clear all filters
TI-2024-27159 CVE-2024-40777 · GHSA-486m-f7fj-5xrm

Out-of-bounds read in Apple iOS and iPadOS

Priority LOW 35

An out-of-bounds access issue was addressed with improved bounds checking.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.07697 Published 2024-07-29 Fixed in 17.6, 14.6 +2 CWE-125
TI-2024-18478 CVE-2024-27871 · GHSA-mmcm-8vr2-mmc9

Path traversal in Apple iOS and iPadOS

Priority LOW 24

A path handling issue was addressed with improved validation.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00262 Published 2024-07-29 Fixed in 17.6, 14.6 CWE-22
TI-2024-27176 CVE-2024-40794 · GHSA-vcmx-3577-7jh3

Improper authentication in Apple Safari

Priority LOW 26

This issue was addressed through improved state management.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01179 Published 2024-07-29 Fixed in 17.6, 14.6 CWE-287
TI-2024-27164 CVE-2024-40782 · GHSA-4rw8-cxgp-9r2g

Use after free in Apple Safari

Priority MEDIUM 51

A use-after-free issue was addressed with improved memory management.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00977 Published 2024-07-29 Partial fix · 17.6, 16.7.9 +3 CWE-416
TI-2024-27186 CVE-2024-40804 · GHSA-q25c-28ww-34p7

Information disclosure in Apple macOS

Priority LOW 24

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00247 Published 2024-07-29 Fixed in 14.6 CWE-200
TI-2024-27158 CVE-2024-40776 · GHSA-4645-h4xp-pj82

Use after free in Apple Safari

Priority LOW 31

A use-after-free issue was addressed with improved memory management.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01006 Published 2024-07-29 Partial fix · 17.6, 16.7.9 +3 CWE-416
TI-2024-27201 CVE-2024-40822 · GHSA-r54r-9gw2-2w5v

Improper access control in Apple iOS and iPadOS

Priority LOW 13

This issue was addressed by restricting options offered on a locked device.

CVSS 3.1LOW 2.4 Physical No auth No interaction EPSS 0.00408 Published 2024-07-29 Fixed in 16.7.9, 17.6 +2 CWE-284
TI-2024-27171 CVE-2024-40789 · GHSA-6mp9-hrx8-6ffg

Out-of-bounds read in Apple Safari

Priority LOW 31

An out-of-bounds access issue was addressed with improved bounds checking.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01148 Published 2024-07-29 Partial fix · 17.6, 16.7.9 +3 CWE-125
TI-2024-27167 CVE-2024-40785 · GHSA-6hq7-9r57-p64g

Cross-site scripting in Apple Safari

Priority LOW 29

This issue was addressed with improved checks.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00781 Published 2024-07-29 Fixed in 17.6, 16.7.9 +3 CWE-79
TI-2024-27215 CVE-2024-40836 · GHSA-ch9g-7w68-jqjr

Information disclosure in Apple iOS and iPadOS

Priority MEDIUM 40

A logic issue was addressed with improved checks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00555 Published 2024-07-29 Fixed in 16.7.9, 17.6 +2 CWE-200
TI-2024-18485 CVE-2024-27878 · GHSA-fpm2-gfqf-g25v

Buffer overflow in Apple macOS

Priority HIGH 65

A buffer overflow issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00328 Published 2024-07-29 Fixed in 14.6 CWE-120
TI-2024-27162 CVE-2024-40780 · GHSA-j573-cwg3-wh35

Out-of-bounds read in Apple Safari

Priority LOW 30

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.007 Published 2024-07-29 Partial fix · 17.6, 16.7.9 +3 CWE-125
TI-2024-27161 CVE-2024-40779 · GHSA-7j6x-9hgr-mv7c

Out-of-bounds read in Apple Safari

Priority LOW 25

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00337 Published 2024-07-29 Partial fix · 17.6, 16.7.9 +3 CWE-125
TI-2024-27160 CVE-2024-40778 · GHSA-prvp-xgc5-f378

Improper authentication in Apple iOS and iPadOS

Priority LOW 16

An authentication issue was addressed with improved state management.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00294 Published 2024-07-29 Fixed in 16.7.9, 17.6 +1 CWE-287