Vulnerabilities

TI-2024-36580 CVE-2024-54503 · GHSA-gg96-2qm6-wg5x

Apple iOS and iPadOS: Muting a call while ringing may not result in mute being enabled

LOW 20

An inconsistent user interface issue was addressed with improved state management.

CVSS 3.1MEDIUM 4.2 Network No auth User interaction EPSS 0.00439 Published 2024-12-11 Fixed in 18.2

TI-2024-36564 CVE-2024-54485 · GHSA-w7rc-39gw-qjww

Insecure storage of sensitive information in Apple iOS and iPadOS

LOW 25

The issue was addressed by adding additional logic.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00286 Published 2024-12-11 Fixed in 18.2, 17.7.3 +1 CWE-922

TI-2024-36570 CVE-2024-54492 · GHSA-jw8x-5w8f-9hrm

Apple iOS and iPadOS: An attacker in a privileged network position may be able to alter…

MEDIUM 51

This issue was addressed by using HTTPS when sending information over the network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00879 Published 2024-12-11 Fixed in 18.2, 17.7.3 +2

TI-2024-36590 CVE-2024-54514 · GHSA-wm24-225r-44gm

Apple iOS and iPadOS: An app may be able to break out of its sandbox

LOW 39

The issue was addressed with improved checks.

CVSS 3.1HIGH 8.6 Local No auth User interaction EPSS 0.00251 Published 2024-12-11 Fixed in 18.2, 13.7.2 +3

TI-2024-36579 CVE-2024-54502 · GHSA-w64q-ccr3-358g

Out-of-bounds read in Apple Safari

MEDIUM 46

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.17137 Published 2024-12-11 Partial fix · 18.2, 17.7.6 +3 CWE-125

TI-2024-36608 CVE-2024-54534 · GHSA-83g6-wm8c-3hx9

Out-of-bounds write in Apple Safari

MEDIUM 45

The issue was addressed with improved memory handling.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01045 Published 2024-12-11 Partial fix · 18.2, 17.7.6 +3 CWE-787

TI-2024-36582 CVE-2024-54505 · GHSA-qfp8-pvg8-2xph

Type confusion in Apple Safari

MEDIUM 42

A type confusion issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0107 Published 2024-12-11 Partial fix · 18.2, 17.7.3 +3 CWE-843

TI-2024-36589 CVE-2024-54513 · GHSA-fw24-x4v5-9x55

Apple iOS and iPadOS: An app may be able to access sensitive user data

LOW 25

A permissions issue was addressed with additional restrictions.

CVSS 3.1MEDIUM 5.7 Adjacent network No auth User interaction EPSS 0.00259 Published 2024-12-11 Fixed in 18.2, 15.2 +2 CWE-281

TI-2024-29807 CVE-2024-44246 · GHSA-c9mr-7r2v-xjc9

Out-of-bounds read in Apple Safari

LOW 26

The issue was addressed with improved routing of Safari-originated requests.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01121 Published 2024-12-11 Fixed in 18.2, 17.7.3 +1 CWE-125

TI-2024-36585 CVE-2024-54508 · GHSA-rq2m-fjrh-fqx7

Out-of-bounds read in Apple Safari

LOW 35

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00967 Published 2024-12-11 Partial fix · 18.2, 17.7.6 +3 CWE-125

TI-2024-36572 CVE-2024-54494 · GHSA-q7qj-rx6w-8pxw

Race condition in Apple iOS and iPadOS

LOW 28

A race condition was addressed with additional validation.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00763 Published 2024-12-11 Fixed in 18.2, 17.7.3 +5 CWE-362

TI-2024-36602 CVE-2024-54527 · GHSA-xjr5-22cj-7cfp

Apple iOS and iPadOS: An app may be able to access sensitive user data

LOW 25

This issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0028 Published 2024-12-11 Fixed in 18.2, 13.7.2 +3

TI-2024-29788 CVE-2024-44225 · GHSA-9wm3-v99j-79rf

Apple iOS and iPadOS: An app may be able to gain elevated privileges

LOW 36

A logic issue was addressed with improved checks.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00306 Published 2024-12-11 Fixed in 18.2, 17.7.3 +4

TI-2024-36601 CVE-2024-54526 · GHSA-c3f2-9wv2-2gxf

Apple iOS and iPadOS: A malicious app may be able to access private information

LOW 31

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.03385 Published 2024-12-11 Fixed in 18.2, 13.7.2 +3

TI-2024-36587 CVE-2024-54510 · GHSA-58f5-8jq5-r8p2

Race condition in Apple iOS and iPadOS

LOW 23

A race condition was addressed with improved locking.

CVSS 3.1MEDIUM 5.1 Local No auth No interaction EPSS 0.00198 Published 2024-12-11 Fixed in 18.2, 17.7.3 +4 CWE-362

TI-2024-29806 CVE-2024-44245 · GHSA-67jx-fcjg-p4rh

Out-of-bounds write in Apple iOS and iPadOS

LOW 31

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00295 Published 2024-12-11 Fixed in 18.2, 17.7.3 +3 CWE-787

TI-2024-36562 CVE-2024-54479 · GHSA-hp58-68h4-82p8

Apple Safari: Processing maliciously crafted web content may lead to an unexpected…

MEDIUM 42

The issue was addressed with improved checks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01585 Published 2024-12-11 Partial fix · 18.2, 17.7.3 +3

TI-2024-36578 CVE-2024-54501 · GHSA-372f-8jhc-h6mp

Resource allocation without limits in Apple iOS and iPadOS

LOW 25

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00314 Published 2024-12-11 Fixed in 18.2, 17.7.3 +5 CWE-770

TI-2024-36577 CVE-2024-54500 · GHSA-rmh8-223g-x64m

Apple iOS and iPadOS: Processing a maliciously crafted image may result in disclosure of…

LOW 25

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00315 Published 2024-12-11 Fixed in 18.2, 17.7.3 +5

TI-2024-36565 CVE-2024-54486 · GHSA-wj3x-pcf8-r7qm

Apple iOS and iPadOS: Processing a maliciously crafted font may result in the disclosure…

LOW 32

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01361 Published 2024-12-11 Fixed in 18.2, 17.7.3 +5

Vulnerabilities

Filters