Vulnerabilities

TI-2024-27159 CVE-2024-40777 · GHSA-486m-f7fj-5xrm

Out-of-bounds read in Apple iOS and iPadOS

LOW 35

An out-of-bounds access issue was addressed with improved bounds checking.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.07697 Published 2024-07-29 Fixed in 17.6, 14.6 +2 CWE-125

TI-2024-18478 CVE-2024-27871 · GHSA-mmcm-8vr2-mmc9

Path traversal in Apple iOS and iPadOS

LOW 24

A path handling issue was addressed with improved validation.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00262 Published 2024-07-29 Fixed in 17.6, 14.6 CWE-22

TI-2024-27176 CVE-2024-40794 · GHSA-vcmx-3577-7jh3

Improper authentication in Apple Safari

LOW 26

This issue was addressed through improved state management.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01179 Published 2024-07-29 Fixed in 17.6, 14.6 CWE-287

TI-2024-27194 CVE-2024-40813 · GHSA-p9cw-wmxq-f279

Insecure storage of sensitive information in Apple iOS and iPadOS

LOW 21

A lock screen issue was addressed with improved state management.

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00362 Published 2024-07-29 Fixed in 17.6, 10.6 CWE-922

TI-2024-27187 CVE-2024-40805 · GHSA-pf3g-2v7g-24gj

Incorrect default permissions in Apple iOS and iPadOS

LOW 35

A permissions issue was addressed with additional restrictions.

CVSS 3.1HIGH 7.7 Local No auth No interaction EPSS 0.00238 Published 2024-07-29 Fixed in 17.6, 14.6 +1 CWE-281

TI-2024-27177 CVE-2024-40795 · GHSA-v79c-wmw8-rqjf

Apple iOS and iPadOS: An app may be able to read sensitive location information

LOW 16

This issue was addressed with improved data protection.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.0033 Published 2024-07-29 Fixed in 17.6, 14.6 +1

TI-2024-27203 CVE-2024-40824 · GHSA-r2wh-vq7h-jhg4

Apple iOS and iPadOS: An app may be able to bypass Privacy preferences

LOW 35

This issue was addressed through improved state management.

CVSS 3.1HIGH 7.7 Local No auth No interaction EPSS 0.00279 Published 2024-07-29 Fixed in 17.6, 14.6 +1 CWE-281

TI-2024-27196 CVE-2024-40815 · GHSA-mxhg-mc93-9g8m

Cross-site request forgery in Apple iOS and iPadOS

LOW 37

A race condition was addressed with additional validation.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.0109 Published 2024-07-29 Fixed in 17.6, 13.6.8 +2 CWE-352

TI-2024-18475 CVE-2024-27863 · GHSA-4mr2-m258-8523

Apple iOS and iPadOS: A local attacker may be able to determine kernel memory layout

LOW 25

An information disclosure issue was addressed with improved private data redaction for log entries.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00297 Published 2024-07-29 Fixed in 17.6, 14.6 +2

TI-2024-27169 CVE-2024-40787 · GHSA-264r-p5m9-6v8c

Apple iOS and iPadOS: A shortcut may be able to bypass Internet permission requirements

LOW 31

This issue was addressed by adding an additional prompt for user consent.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00332 Published 2024-07-29 Fixed in 17.6, 12.7.6 +3

TI-2024-27156 CVE-2024-40774 · GHSA-wqm3-wvfr-qhw4

Apple iOS and iPadOS: An app may be able to bypass Privacy preferences

LOW 31

A downgrade issue was addressed with additional code-signing restrictions.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00331 Published 2024-07-29 Fixed in 17.6, 12.7.6 +3

Vulnerabilities

Filters