Vulnerabilities

TI-2024-18424 CVE-2024-27810 · GHSA-h83h-p79w-q64j

Path traversal in Apple iOS and iPadOS

MEDIUM 44

A path handling issue was addressed with improved validation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00708 Published 2024-05-13 Fixed in 17.5, 12.7.5 +3 CWE-28

TI-2024-18430 CVE-2024-27816 · GHSA-8gv2-gcw7-7jwv

LOW 27

A logic issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00977 Published 2024-05-13 Fixed in 17.5, 14.5 +1

TI-2024-18435 CVE-2024-27821 · GHSA-69wv-v57r-pj37

MEDIUM 43

A path handling issue was addressed with improved validation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00915 Published 2024-05-13 Fixed in 17.5, 14.5 +1 CWE-22

TI-2024-18448 CVE-2024-27834 · GHSA-4rmp-jjj9-cfm4

HIGH 82KEV

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.01502 Published 2024-05-13 Partial fix · 17.5, 16.7.8 +2 CWE-287

TI-2024-18418 CVE-2024-27804 · GHSA-wm6p-93j5-rx57

MEDIUM 40

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.1 Local No auth No interaction EPSS 0.01314 Published 2024-05-13 Fixed in 17.5, 14.5 +2 CWE-1325