Vulnerabilities

TI-2024-18424 CVE-2024-27810 · GHSA-h83h-p79w-q64j

Path traversal in Apple iOS and iPadOS

MEDIUM 44

A path handling issue was addressed with improved validation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00708 Published 2024-05-13 Fixed in 17.5, 12.7.5 +3 CWE-28

TI-2024-18460 CVE-2024-27847 · GHSA-52mx-4f7f-jvvm

MEDIUM 40

This issue was addressed with improved checks.

CVSS 3.1HIGH 7.4 Local No auth No interaction EPSS 0.00222 Published 2024-05-13 Fixed in 16.7.8, 17.5 +3 CWE-277

TI-2024-18411 CVE-2024-27796 · GHSA-xw4h-q7jg-jqg8

MEDIUM 43

The issue was addressed with improved checks.

CVSS 3.1HIGH 8.1 Local No auth No interaction EPSS 0.00256 Published 2024-05-13 Fixed in 16.7.8, 17.5 +3 CWE-1325

TI-2024-18457 CVE-2024-27843 · GHSA-4pxc-m8f9-cxv5

LOW 35

A logic issue was addressed with improved checks.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00215 Published 2024-05-13 Fixed in 12.7.5, 13.6.7 +1

TI-2024-18438 CVE-2024-27824 · GHSA-7h5j-hvw3-j889

MEDIUM 41

This issue was addressed by removing the vulnerable code.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00227 Published 2024-05-13 Fixed in 12.7.5, 13.6.7 +1

TI-2024-18412 CVE-2024-27798 · GHSA-mchv-cchf-g2qg

LOW 35

An authorization issue was addressed with improved state management.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00204 Published 2024-05-13 Fixed in 12.7.5, 13.6.7 +1 CWE-863