Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

36 records

Release: Apple macOS 15 Clear all filters
TI-2024-27204 CVE-2024-40825 · GHSA-79c6-5cw9-rpwc

Improper access control in Apple macOS

Priority LOW 28

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 6.0 Local High privileges No interaction EPSS 0.00221 Published 2024-09-16 Fixed in 15, 2 CWE-284
TI-2024-29703 CVE-2024-44132 · GHSA-56gf-j26c-43xh

Link following in Apple macOS

Priority MEDIUM 40

This issue was addressed with improved handling of symlinks.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00235 Published 2024-09-16 Fixed in 15 CWE-61
TI-2024-29752 CVE-2024-44186 · GHSA-96j7-6x53-7368

Information disclosure in Apple macOS

Priority LOW 24

An access issue was addressed with additional sandbox restrictions.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00213 Published 2024-09-16 Fixed in 15 CWE-200
TI-2024-29753 CVE-2024-44187 · GHSA-xmf6-p99q-898v

Origin validation error in Apple Safari

Priority LOW 30

A cross-origin issue existed with "iframe" elements.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00646 Published 2024-09-16 Partial fix · 18, 15 +2 CWE-346
TI-2024-29719 CVE-2024-44152 · GHSA-hx98-qf58-hff9

Information disclosure in Apple macOS

Priority LOW 34

A privacy issue was addressed with improved private data redaction for log entries.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00584 Published 2024-09-16 Fixed in 15 CWE-200
TI-2024-27221 CVE-2024-40842 · GHSA-rcw8-56q4-fh4w

Information disclosure in Apple macOS

Priority LOW 24

An issue was addressed with improved validation of environment variables.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00231 Published 2024-09-16 Fixed in 15 CWE-200
TI-2024-18473 CVE-2024-27861 · GHSA-3q47-272x-vrfj

Out-of-bounds read in Apple macOS

Priority LOW 24

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00243 Published 2024-09-16 Fixed in 15 CWE-125
TI-2024-29705 CVE-2024-44134 · GHSA-x79g-r583-xj83

Out-of-bounds read in Apple macOS

Priority LOW 24

This issue was addressed with improved redaction of sensitive information.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00208 Published 2024-09-16 Fixed in 15 CWE-125
TI-2024-18472 CVE-2024-27860 · GHSA-8x82-8rpw-g64h

Out-of-bounds read in Apple macOS

Priority LOW 24

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00233 Published 2024-09-16 Fixed in 15 CWE-125
TI-2024-27154 CVE-2024-40770 · GHSA-6879-gf6q-3qmj

Incorrect authorization in Apple macOS

Priority LOW 33

A permissions issue was addressed with additional restrictions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00491 Published 2024-09-16 Fixed in 15 CWE-863
TI-2024-27217 CVE-2024-40838 · GHSA-3qf3-f6f4-6993

Information disclosure in Apple macOS

Priority LOW 15

A privacy issue was addressed by moving sensitive data to a protected location.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00229 Published 2024-09-16 Fixed in 15 CWE-200
TI-2024-27222 CVE-2024-40843 · GHSA-93r2-j783-g4wf

Incorrect authorization in Apple macOS

Priority LOW 24

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00202 Published 2024-09-16 Fixed in 15 CWE-863
TI-2024-29764 CVE-2024-44198 · GHSA-x44q-9q24-vjf9

Integer overflow in Apple iOS and iPadOS

Priority LOW 24

An integer overflow was addressed through improved input validation.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00187 Published 2024-09-16 Fixed in 18, 15 +2 CWE-190
TI-2024-27236 CVE-2024-40857 · GHSA-8476-jpv4-xp4p

Cross-site scripting in Apple Safari

Priority LOW 28

This issue was addressed through improved state management.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00553 Published 2024-09-16 Partial fix · 18, 15 +2 CWE-79
Load more