Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

14 records

Release: Apple visionOS 1.1 Clear all filters
TI-2024-15368 CVE-2024-23263 · GHSA-xrrw-7rr2-829v

Improper input validation in Apple Safari

Priority MEDIUM 40

A logic issue was addressed with improved validation.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.01496 Published 2024-03-08 Partial fix · 17.4, 16.7.6 +3 CWE-20
TI-2024-15367 CVE-2024-23262 · GHSA-g4m8-6xwj-mc45

Incorrect authorization in Apple iOS and iPadOS

Priority LOW 21

This issue was addressed with additional entitlement checks.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0048 Published 2024-03-08 Fixed in 16.7.6, 17.4 +1 CWE-863
TI-2024-15341 CVE-2024-23235 · GHSA-v98w-rc85-gp5v

Information disclosure in Apple iOS and iPadOS

Priority LOW 38

A race condition was addressed with additional validation.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00501 Published 2024-03-08 Fixed in 16.7.6, 17.4 +3 CWE-200
TI-2024-15363 CVE-2024-23258 · GHSA-rf7r-2hr8-m287

Out-of-bounds read in Apple macOS

Priority LOW 36

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00239 Published 2024-03-08 Fixed in 14.4, 1.1 CWE-125
TI-2024-15391 CVE-2024-23286 · GHSA-6f36-v2cc-hv4m

Buffer overflow in Apple iOS and iPadOS

Priority MEDIUM 51

A buffer overflow issue was addressed with improved memory handling.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01236 Published 2024-03-08 Fixed in 16.7.6, 17.4 +5 CWE-120
TI-2024-15369 CVE-2024-23264 · GHSA-54qr-qrfv-pmc3

Out-of-bounds read in Apple iOS and iPadOS

Priority LOW 26

A validation issue was addressed with improved input sanitization.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00797 Published 2024-03-08 Fixed in 16.7.6, 17.4 +4 CWE-125
TI-2024-15389 CVE-2024-23284 · GHSA-ppgm-9w39-cx97

Protection mechanism failure in Apple Safari

Priority LOW 32

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01473 Published 2024-03-08 Partial fix · 17.4, 16.7.6 +3 CWE-693
TI-2024-15332 CVE-2024-23226 · GHSA-9hgh-cqm9-hh6h

Out-of-bounds write in Apple iOS and iPadOS

Priority MEDIUM 42

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01188 Published 2024-03-08 Fixed in 17.4, 14.4 +2 CWE-787
TI-2024-15362 CVE-2024-23257 · GHSA-pm93-x7pc-g8qx

Memory corruption in Apple iOS and iPadOS

Priority LOW 16

The issue was addressed with improved memory handling.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00447 Published 2024-03-08 Fixed in 16.7.6, 12.7.4 +3 CWE-119
TI-2024-15400 CVE-2024-23295 · GHSA-x7v5-rxwv-mpjw

Incorrect default permissions in Apple visionOS

Priority LOW 27

A permissions issue was addressed to help ensure Personas are always protected.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00265 Published 2024-03-08 Fixed in 1.1 CWE-276