Vulnerabilities

TI-2024-29820 CVE-2024-44260 · GHSA-wfp8-7fr2-4r6h

Apple macOS: A malicious app with root privileges may be able to modify the contents of…

LOW 31

This issue was addressed by removing the vulnerable code.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00237 Published 2024-10-28 Fixed in 13.7.1, 14.7.1 +1

TI-2024-29798 CVE-2024-44237 · GHSA-7m3j-r733-g8p5

Out-of-bounds read in Apple macOS

LOW 30

An out-of-bounds access issue was addressed with improved bounds checking.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00553 Published 2024-10-28 Fixed in 13.7.1, 14.7.1 +1 CWE-125

TI-2024-29851 CVE-2024-44295 · GHSA-7wph-w54f-6qwc

Apple macOS: An app may be able to modify protected parts of the file system

LOW 35

This issue was addressed with additional entitlement checks.

CVSS 3.1HIGH 7.7 Local No auth No interaction EPSS 0.00235 Published 2024-10-28 Fixed in 13.7.1, 14.7.1 +1

TI-2024-29840 CVE-2024-44283 · GHSA-f555-wmcp-xf56

Out-of-bounds read in Apple macOS

LOW 30

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00553 Published 2024-10-28 Fixed in 13.7.1, 14.7.1 +1 CWE-125

TI-2024-29801 CVE-2024-44240 · GHSA-87g7-f8g4-hxvm

Apple iOS and iPadOS: Processing a maliciously crafted font may result in the disclosure…

LOW 29

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00531 Published 2024-10-28 Fixed in 17.7.1, 18.1 +5

TI-2024-29816 CVE-2024-44256 · GHSA-5v4h-w7cq-pp53

Apple macOS: An app may be able to break out of its sandbox

MEDIUM 42

The issue was addressed with improved input sanitization.

CVSS 3.1CRITICAL 9.3 Local No auth No interaction EPSS 0.00245 Published 2024-10-28 Fixed in 13.7.1, 14.7.1 +1

TI-2024-29817 CVE-2024-44257 · GHSA-jp34-38w5-5x67

Insecure storage of sensitive information in Apple macOS

LOW 27

This issue was addressed with improved redaction of sensitive information.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00235 Published 2024-10-28 Fixed in 13.7.1, 14.7.1 +1 CWE-922

TI-2024-29780 CVE-2024-44216 · GHSA-q4hf-cj39-2g9p

Insecure storage of sensitive information in Apple macOS

LOW 27

An access issue was addressed with additional sandbox restrictions.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00235 Published 2024-10-28 Fixed in 13.7.1, 14.7.1 +1 CWE-922

TI-2024-29839 CVE-2024-44282 · GHSA-7mw3-c8c6-gh37

Out-of-bounds read in Apple iOS and iPadOS

LOW 30

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00806 Published 2024-10-28 Fixed in 17.7.1, 18.1 +5 CWE-125

TI-2024-29850 CVE-2024-44294 · GHSA-7cc2-r5j9-8g6h

Apple macOS: An attacker with root privileges may be able to delete protected system files

LOW 30

A path deletion vulnerability was addressed by preventing vulnerable code from running with privileges.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00846 Published 2024-10-28 Fixed in 13.7.1, 14.7.1 +1

TI-2024-29797 CVE-2024-44236 · GHSA-94jr-5hwp-8492

Out-of-bounds write in Apple macOS

MEDIUM 42

An out-of-bounds access issue was addressed with improved bounds checking.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.11406 Published 2024-10-28 Fixed in 13.7.1, 14.7.1 +1 CWE-787

TI-2024-29762 CVE-2024-44196 · GHSA-xvhx-jwjw-g589

Incorrect authorization in Apple macOS

LOW 39

A permissions issue was addressed with additional restrictions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00522 Published 2024-10-28 Fixed in 13.7.1, 14.7.1 +1 CWE-863

TI-2024-29726 CVE-2024-44159 · GHSA-c83g-cgfm-hc33

Apple macOS: An app may be able to bypass Privacy preferences

LOW 33

A path deletion vulnerability was addressed by preventing vulnerable code from running with privileges.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00269 Published 2024-10-28 Fixed in 13.7.1, 14.7.1 +1

TI-2024-29828 CVE-2024-44270 · GHSA-3vrp-8p8h-29r9

Incorrect authorization in Apple macOS

MEDIUM 44

A logic issue was addressed with improved validation.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00647 Published 2024-10-28 Fixed in 13.7.1, 14.7.1 +1 CWE-863

TI-2024-29845 CVE-2024-44289 · GHSA-5qq3-3hpq-crq9

Incorrect authorization in Apple macOS

MEDIUM 40

A privacy issue was addressed with improved private data redaction for log entries.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00625 Published 2024-10-28 Fixed in 13.7.1, 14.7.1 +1 CWE-863

TI-2024-29826 CVE-2024-44267 · GHSA-xf88-x6f5-fvg8

Apple macOS: A malicious application may be able to modify protected parts of the file…

LOW 25

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00453 Published 2024-10-28 Fixed in 13.7.1, 14.7.1 +1

TI-2024-29763 CVE-2024-44197 · GHSA-p5wf-4fg4-hw2q

Apple macOS: An app may be able to cause unexpected system termination or corrupt kernel…

LOW 27

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.01014 Published 2024-10-28 Fixed in 13.7.1, 14.7.1 +1

TI-2024-29808 CVE-2024-44247 · GHSA-pjg9-qwh6-g7w9

Incorrect authorization in Apple macOS

LOW 24

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00217 Published 2024-10-28 Fixed in 13.7.1, 14.7.1 +1 CWE-863

TI-2024-29858 CVE-2024-44302 · GHSA-qvrv-r8xg-hh75

Apple iOS and iPadOS: Processing a maliciously crafted font may result in the disclosure…

LOW 25

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00514 Published 2024-10-28 Fixed in 17.7.1, 18.1 +5

TI-2024-29841 CVE-2024-44284 · GHSA-w5rm-cgqj-5hxq

Out-of-bounds write in Apple macOS

LOW 30

An out-of-bounds write issue was addressed with improved input validation.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00576 Published 2024-10-28 Fixed in 13.7.1, 14.7.1 +1 CWE-787

TI-2024-29778 CVE-2024-44213 · GHSA-5744-494c-924x

Insecure storage of sensitive information in Apple macOS

MEDIUM 40

An issue existed in the parsing of URLs.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00745 Published 2024-10-28 Fixed in 13.7.1, 14.7.1 +1 CWE-922

TI-2024-29857 CVE-2024-44301 · GHSA-8792-j7xc-qcgv

Incorrect authorization in Apple macOS

LOW 24

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00202 Published 2024-10-28 Fixed in 13.7.1, 14.7.1 +1 CWE-863

TI-2024-29844 CVE-2024-44287 · GHSA-72vv-fghx-58jc

Incorrect authorization in Apple macOS

LOW 24

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00223 Published 2024-10-28 Fixed in 13.7.1, 14.7.1 +1 CWE-863

TI-2024-29824 CVE-2024-44264 · GHSA-f729-m528-5h64

Link following in Apple macOS

MEDIUM 40

This issue was addressed with improved validation of symlinks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00619 Published 2024-10-28 Fixed in 13.7.1, 14.7.1 +1 CWE-59

TI-2024-29825 CVE-2024-44265 · GHSA-3m6c-6c98-23qq

Missing authorization in Apple macOS

MEDIUM 40

The issue was addressed by restricting options offered on a locked device.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00626 Published 2024-10-28 Fixed in 13.7.1, 14.7.1 +1 CWE-862

Vulnerabilities

Filters