Vulnerabilities

TI-2024-15364 CVE-2024-23259 · GHSA-7537-7q22-h2h7

Uncontrolled resource consumption in Apple iOS and iPadOS

LOW 30

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0085 Published 2024-03-08 Fixed in 16.7.6, 17.4 +1 CWE-400

TI-2024-15368 CVE-2024-23263 · GHSA-xrrw-7rr2-829v

Improper input validation in Apple Safari

MEDIUM 40

A logic issue was addressed with improved validation.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.01496 Published 2024-03-08 Partial fix · 17.4, 16.7.6 +3 CWE-20

TI-2024-15360 CVE-2024-23255 · GHSA-7523-56gq-473q

Incorrect authorization in Apple iOS and iPadOS

MEDIUM 48

An authentication issue was addressed with improved state management.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00672 Published 2024-03-08 Fixed in 17.4, 14.4 CWE-863

TI-2024-15344 CVE-2024-23238 · GHSA-g3gw-gcgh-qmpp

Improper access control in Apple macOS

LOW 33

An access issue was addressed with improved access restrictions.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00212 Published 2024-03-08 Fixed in 14.4 CWE-284

TI-2024-15385 CVE-2024-23280 · GHSA-qc99-8rmf-q4mv

Injection in Apple Safari

LOW 35

An injection issue was addressed with improved validation.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.01276 Published 2024-03-08 Partial fix · 17.4, 14.4 +1 CWE-74

TI-2024-15384 CVE-2024-23279 · GHSA-5x9p-3r7q-7j42

Apple macOS: An app may be able to access user-sensitive data

LOW 24

A privacy issue was addressed with improved private data redaction for log entries.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00248 Published 2024-03-08 Fixed in 14.4

TI-2024-00233 CVE-2024-0258 · GHSA-mwm3-q3pf-fp7v

Improper access control in Apple iOS and iPadOS

MEDIUM 45

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.6 Local No auth User interaction EPSS 0.00265 Published 2024-03-08 Fixed in 17.4, 14.4 +1 CWE-284

TI-2024-15386 CVE-2024-23281 · GHSA-48q5-x6fp-8893

Apple macOS: An app may be able to access sensitive user data

LOW 27

This issue was addressed with improved state management.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.0023 Published 2024-03-08 Fixed in 14.4

TI-2024-15345 CVE-2024-23239 · GHSA-9v4g-5w22-xh84

Race condition in Apple iOS and iPadOS

LOW 27

A race condition was addressed with improved state handling.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.0043 Published 2024-03-08 Fixed in 17.4, 14.4 +1 CWE-362

TI-2024-15348 CVE-2024-23242 · GHSA-v2jv-c66v-hqhv

Sensitive information in log files in Apple iOS and iPadOS

LOW 15

A privacy issue was addressed by not logging contents of text fields.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00214 Published 2024-03-08 Fixed in 17.4, 14.4 CWE-532

TI-2024-15359 CVE-2024-23254 · GHSA-62qm-vc7f-rm93

Apple Safari: A malicious website may exfiltrate audio data cross-origin

LOW 31

The issue was addressed with improved UI handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01253 Published 2024-03-08 Partial fix · 17.4, 14.4 +2

TI-2024-15341 CVE-2024-23235 · GHSA-v98w-rc85-gp5v

Information disclosure in Apple iOS and iPadOS

LOW 38

A race condition was addressed with additional validation.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00501 Published 2024-03-08 Fixed in 16.7.6, 17.4 +3 CWE-200

TI-2024-15363 CVE-2024-23258 · GHSA-rf7r-2hr8-m287

Out-of-bounds read in Apple macOS

LOW 36

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00239 Published 2024-03-08 Fixed in 14.4, 1.1 CWE-125

TI-2024-15358 CVE-2024-23253 · GHSA-322f-7555-6qf5

Improper privilege management in Apple macOS

LOW 39

A permissions issue was addressed with additional restrictions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00411 Published 2024-03-08 Fixed in 14.4 CWE-269

TI-2024-15395 CVE-2024-23290 · GHSA-r72f-rmc7-whwp

Insecure storage of sensitive information in Apple iOS and iPadOS

LOW 25

A logic issue was addressed with improved restrictions.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00503 Published 2024-03-08 Fixed in 17.4, 14.4 +1 CWE-922

TI-2024-15355 CVE-2024-23249 · GHSA-j2cw-j27w-3f6m

Apple macOS: Processing a file may lead to a denial-of-service or potentially disclose…

LOW 31

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00243 Published 2024-03-08 Fixed in 14.4 CWE-404

TI-2024-15338 CVE-2024-23232 · GHSA-jv2q-4725-898c

Insecure storage of sensitive information in Apple macOS

LOW 15

A privacy issue was addressed with improved handling of temporary files.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00219 Published 2024-03-08 Fixed in 14.4 CWE-922

TI-2024-15378 CVE-2024-23273 · GHSA-qg9g-p9q2-wjvw

Improper certificate validation in Apple Safari

LOW 21

This issue was addressed through improved state management.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00732 Published 2024-03-08 Fixed in 17.4, 14.4 CWE-295

TI-2024-15339 CVE-2024-23233 · GHSA-v72q-pr3v-f552

Apple macOS: Entitlements and privacy permissions granted to this app may be used by a…

LOW 33

This issue was addressed with improved checks.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00219 Published 2024-03-08 Fixed in 14.4 CWE-277

TI-2024-15354 CVE-2024-23248 · GHSA-m9jj-4rp8-mm96

Apple macOS: Processing a file may lead to a denial-of-service or potentially disclose…

LOW 32

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00472 Published 2024-03-08 Fixed in 14.4 CWE-404

TI-2024-15396 CVE-2024-23291 · GHSA-c534-6v46-r777

Apple iOS and iPadOS: A malicious app may be able to observe user data in log entries…

MEDIUM 40

A privacy issue was addressed with improved private data redaction for log entries.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0063 Published 2024-03-08 Fixed in 17.4, 14.4 +1

TI-2024-15392 CVE-2024-23287 · GHSA-mq4f-242h-v9hj

Apple iOS and iPadOS: An app may be able to access user-sensitive data

LOW 30

A privacy issue was addressed with improved handling of temporary files.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00669 Published 2024-03-08 Fixed in 17.4, 14.4 +1 CWE-377

TI-2024-15312 CVE-2024-23205 · GHSA-f8q5-x5fj-x8wj

Insecure storage of sensitive information in Apple iOS and iPadOS

LOW 24

A privacy issue was addressed with improved private data redaction for log entries.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00218 Published 2024-03-08 Fixed in 17.4, 14.4 CWE-922

TI-2024-15397 CVE-2024-23292 · GHSA-4466-5jhm-q8x8

Information disclosure in Apple iOS and iPadOS

LOW 16

This issue was addressed with improved data protection.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00253 Published 2024-03-08 Fixed in 17.4, 14.4 CWE-200

TI-2024-15389 CVE-2024-23284 · GHSA-ppgm-9w39-cx97

Protection mechanism failure in Apple Safari

LOW 32

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01473 Published 2024-03-08 Partial fix · 17.4, 16.7.6 +3 CWE-693

Vulnerabilities

Filters