Vulnerabilities

TI-2024-36570 CVE-2024-54492 · GHSA-jw8x-5w8f-9hrm

Apple iOS and iPadOS: An attacker in a privileged network position may be able to alter…

MEDIUM 51

This issue was addressed by using HTTPS when sending information over the network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00879 Published 2024-12-11 Fixed in 18.2, 17.7.3 +2

TI-2024-36579 CVE-2024-54502 · GHSA-w64q-ccr3-358g

Out-of-bounds read in Apple Safari

MEDIUM 46

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.17137 Published 2024-12-11 Partial fix · 18.2, 17.7.6 +3 CWE-125

TI-2024-36608 CVE-2024-54534 · GHSA-83g6-wm8c-3hx9

Out-of-bounds write in Apple Safari

MEDIUM 45

The issue was addressed with improved memory handling.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01045 Published 2024-12-11 Partial fix · 18.2, 17.7.6 +3 CWE-787

TI-2024-36582 CVE-2024-54505 · GHSA-qfp8-pvg8-2xph

Type confusion in Apple Safari

MEDIUM 42

A type confusion issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0107 Published 2024-12-11 Partial fix · 18.2, 17.7.3 +3 CWE-843

TI-2024-36589 CVE-2024-54513 · GHSA-fw24-x4v5-9x55

Apple iOS and iPadOS: An app may be able to access sensitive user data

LOW 25

A permissions issue was addressed with additional restrictions.

CVSS 3.1MEDIUM 5.7 Adjacent network No auth User interaction EPSS 0.00259 Published 2024-12-11 Fixed in 18.2, 15.2 +2 CWE-281

TI-2024-36585 CVE-2024-54508 · GHSA-rq2m-fjrh-fqx7

Out-of-bounds read in Apple Safari

LOW 35

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00967 Published 2024-12-11 Partial fix · 18.2, 17.7.6 +3 CWE-125

TI-2024-36572 CVE-2024-54494 · GHSA-q7qj-rx6w-8pxw

Race condition in Apple iOS and iPadOS

LOW 28

A race condition was addressed with additional validation.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00763 Published 2024-12-11 Fixed in 18.2, 17.7.3 +5 CWE-362

TI-2024-29806 CVE-2024-44245 · GHSA-67jx-fcjg-p4rh

Out-of-bounds write in Apple iOS and iPadOS

LOW 31

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00295 Published 2024-12-11 Fixed in 18.2, 17.7.3 +3 CWE-787

TI-2024-36562 CVE-2024-54479 · GHSA-hp58-68h4-82p8

Apple Safari: Processing maliciously crafted web content may lead to an unexpected…

MEDIUM 42

The issue was addressed with improved checks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01585 Published 2024-12-11 Partial fix · 18.2, 17.7.3 +3

TI-2024-36578 CVE-2024-54501 · GHSA-372f-8jhc-h6mp

Resource allocation without limits in Apple iOS and iPadOS

LOW 25

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00314 Published 2024-12-11 Fixed in 18.2, 17.7.3 +5 CWE-770

TI-2024-36577 CVE-2024-54500 · GHSA-rmh8-223g-x64m

Apple iOS and iPadOS: Processing a maliciously crafted image may result in disclosure of…

LOW 25

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00315 Published 2024-12-11 Fixed in 18.2, 17.7.3 +5

TI-2024-36565 CVE-2024-54486 · GHSA-wj3x-pcf8-r7qm

Apple iOS and iPadOS: Processing a maliciously crafted font may result in the disclosure…

LOW 32

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01361 Published 2024-12-11 Fixed in 18.2, 17.7.3 +5

Vulnerabilities

Filters