Vulnerabilities

TI-2024-18430 CVE-2024-27816 · GHSA-8gv2-gcw7-7jwv

Apple iOS and iPadOS: An attacker may be able to access user data

LOW 27

A logic issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00977 Published 2024-05-13 Fixed in 17.5, 14.5 +1

TI-2024-18455 CVE-2024-27841 · GHSA-hw9f-66ch-w6pg

Improper access control in Apple iOS and iPadOS

MEDIUM 49

The issue was addressed with improved memory handling.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00441 Published 2024-05-13 Fixed in 17.5, 14.5 CWE-284

TI-2024-18435 CVE-2024-27821 · GHSA-69wv-v57r-pj37

Path traversal in Apple iOS and iPadOS

MEDIUM 43

A path handling issue was addressed with improved validation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00915 Published 2024-05-13 Fixed in 17.5, 14.5 +1 CWE-22

TI-2024-18451 CVE-2024-27837 · GHSA-q2hw-c235-rp9r

Apple macOS: A local attacker may gain access to Keychain items

MEDIUM 41

A downgrade issue was addressed with additional code-signing restrictions.

CVSS 3.1HIGH 7.7 Local No auth No interaction EPSS 0.00176 Published 2024-05-13 Fixed in 14.5 CWE-280

TI-2024-18432 CVE-2024-27818 · GHSA-3xmr-5wwh-fr8m

Command injection in Apple iOS and iPadOS

MEDIUM 43

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00727 Published 2024-05-13 Fixed in 16.7.8, 17.5 +1 CWE-77

TI-2024-18436 CVE-2024-27822 · GHSA-9frm-76c2-fq2w

Apple macOS: An app may be able to gain root privileges

HIGH 69

A logic issue was addressed with improved restrictions.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01464 Published 2024-05-13 Fixed in 14.5 CWE-277

TI-2024-18448 CVE-2024-27834 · GHSA-4rmp-jjj9-cfm4

Pointer Authentication bypass in Apple Safari, iOS and macOS

HIGH 82KEV

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.01502 Published 2024-05-13 Partial fix · 17.5, 16.7.8 +2 CWE-287

TI-2024-18456 CVE-2024-27842 · GHSA-cjw9-8435-h4q5

Apple macOS: An app may be able to execute arbitrary code with kernel privileges

HIGH 76

The issue was addressed with improved checks.

CVSS 3.1HIGH 8.1 Local No auth No interaction EPSS 0.00327 Published 2024-05-13 Fixed in 14.5 CWE-358

TI-2024-15342 CVE-2024-23236 · GHSA-rc9x-h469-w6gc

Information disclosure in Apple macOS

LOW 24

A correctness issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00254 Published 2024-05-13 Fixed in 14.5 CWE-200

TI-2024-18418 CVE-2024-27804 · GHSA-wm6p-93j5-rx57

Resource allocation without limits in Apple iOS and iPadOS

MEDIUM 40

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.1 Local No auth No interaction EPSS 0.01314 Published 2024-05-13 Fixed in 17.5, 14.5 +2 CWE-1325

TI-2024-18443 CVE-2024-27829 · GHSA-cm5q-2h7w-xfc7

Apple macOS: Processing a file may lead to unexpected app termination or arbitrary code…

LOW 37

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00632 Published 2024-05-13 Fixed in 14.5 CWE-788

TI-2024-18427 CVE-2024-27813 · GHSA-j3mh-hgxq-fp6h

Apple macOS: An app may be able to execute arbitrary code out of its sandbox or with…

LOW 37

The issue was addressed with improved checks.

CVSS 3.1HIGH 8.6 Local No auth User interaction EPSS 0.00391 Published 2024-05-13 Fixed in 14.5

TI-2024-18439 CVE-2024-27825 · GHSA-wxc5-mwv4-h4hh

Apple macOS: An app may be able to bypass certain Privacy preferences

MEDIUM 41

A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions.

CVSS 3.1HIGH 7.8 Local No auth No interaction EPSS 0.0019 Published 2024-05-13 Fixed in 14.5 CWE-277

Vulnerabilities

Filters