Vulnerabilities

TI-2024-15340 CVE-2024-23234 · GHSA-rvw4-7ggj-6vq9

Out-of-bounds write in Apple macOS

LOW 36

An out-of-bounds write issue was addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00257 Published 2024-03-08 Fixed in 12.7.4, 13.6.5 +1 CWE-787

TI-2024-15380 CVE-2024-23275 · GHSA-525f-hw88-w4m8

Race condition in Apple macOS

LOW 21

A race condition was addressed with additional validation.

CVSS 3.1MEDIUM 4.7 Local No auth User interaction EPSS 0.0017 Published 2024-03-08 Fixed in 12.7.4, 13.6.5 +1 CWE-362

TI-2024-15379 CVE-2024-23274 · GHSA-9w9w-6vpx-x9q3

Injection in Apple macOS

LOW 39

An injection issue was addressed with improved input validation.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.0042 Published 2024-03-08 Fixed in 12.7.4, 13.6.5 +1 CWE-75

TI-2024-15351 CVE-2024-23245 · GHSA-r55q-74mf-r3h8

Apple macOS: Third-party shortcuts may use a legacy action from Automator to send events…

LOW 25

This issue was addressed by adding an additional prompt for user consent.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00431 Published 2024-03-08 Fixed in 12.7.4, 13.6.5 +1

TI-2024-15391 CVE-2024-23286 · GHSA-6f36-v2cc-hv4m

Buffer overflow in Apple iOS and iPadOS

MEDIUM 51

A buffer overflow issue was addressed with improved memory handling.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01236 Published 2024-03-08 Fixed in 16.7.6, 17.4 +5 CWE-120

TI-2024-15374 CVE-2024-23269 · GHSA-vv7g-c3c6-6qq2

Apple macOS: An app may be able to modify protected parts of the file system

LOW 27

A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00247 Published 2024-03-08 Fixed in 12.7.4, 13.6.5 +1

TI-2024-15370 CVE-2024-23265 · GHSA-pw65-258f-v77h

Uncontrolled resource consumption in Apple iOS and iPadOS

MEDIUM 50

A memory corruption vulnerability was addressed with improved locking.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00715 Published 2024-03-08 Fixed in 16.7.6, 17.4 +5 CWE-400

TI-2024-15377 CVE-2024-23272 · GHSA-5c5p-qh6w-cqq9

Apple macOS: An attacker may gain access to protected parts of the file system

LOW 24

A logic issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00238 Published 2024-03-08 Fixed in 12.7.4, 13.6.5 +1

TI-2024-15369 CVE-2024-23264 · GHSA-54qr-qrfv-pmc3

Out-of-bounds read in Apple iOS and iPadOS

LOW 26

A validation issue was addressed with improved input sanitization.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00797 Published 2024-03-08 Fixed in 16.7.6, 17.4 +4 CWE-125

TI-2024-15373 CVE-2024-23268 · GHSA-75qq-7gc3-2xjr

Injection in Apple macOS

LOW 39

An injection issue was addressed with improved input validation.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.0042 Published 2024-03-08 Fixed in 12.7.4, 13.6.5 +1 CWE-75

TI-2024-15353 CVE-2024-23247 · GHSA-92j5-pvp2-25px

Command injection in Apple macOS

LOW 36

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00382 Published 2024-03-08 Fixed in 12.7.4, 13.6.5 +1 CWE-77

TI-2024-15372 CVE-2024-23267 · GHSA-vgq4-3x26-93jq

Improper access control in Apple macOS

LOW 24

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00226 Published 2024-03-08 Fixed in 12.7.4, 13.6.5 +1 CWE-284

TI-2024-15336 CVE-2024-23230 · GHSA-8g69-6rgj-v638

Missing authorization in Apple macOS

LOW 24

This issue was addressed with improved file handling.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0021 Published 2024-03-08 Fixed in 12.7.4, 13.6.5 +1 CWE-862

TI-2024-15371 CVE-2024-23266 · GHSA-m88g-7rcv-6rcx

Improper access control in Apple macOS

LOW 24

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00228 Published 2024-03-08 Fixed in 12.7.4, 13.6.5 +1 CWE-284

TI-2024-15375 CVE-2024-23270 · GHSA-4rxr-8xrx-9rf3

Out-of-bounds write in Apple iOS and iPadOS

LOW 36

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00277 Published 2024-03-08 Fixed in 17.4, 12.7.4 +2 CWE-787

TI-2024-15333 CVE-2024-23227 · GHSA-9cgg-5x5j-5c33

Apple macOS: An app may be able to read sensitive location information

LOW 27

This issue was addressed with improved redaction of sensitive information.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00247 Published 2024-03-08 Fixed in 12.7.4, 13.6.5 +1

TI-2024-15323 CVE-2024-23216 · GHSA-6pww-pf77-29vx

Path traversal in Apple macOS

LOW 33

A path handling issue was addressed with improved validation.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00272 Published 2024-03-08 Fixed in 12.7.4, 13.6.5 +1 CWE-22

TI-2024-15362 CVE-2024-23257 · GHSA-pm93-x7pc-g8qx

Memory corruption in Apple iOS and iPadOS

LOW 16

The issue was addressed with improved memory handling.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00447 Published 2024-03-08 Fixed in 16.7.6, 12.7.4 +3 CWE-119

TI-2024-15388 CVE-2024-23283 · GHSA-7j2j-w9w6-4cg9

Apple iOS and iPadOS: An app may be able to access user-sensitive data

LOW 27

A privacy issue was addressed with improved private data redaction for log entries.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00259 Published 2024-03-08 Fixed in 16.7.6, 12.7.4 +2

TI-2024-15381 CVE-2024-23276 · GHSA-6f82-qgq9-9h8f

Improper privilege management in Apple macOS

LOW 38

A logic issue was addressed with improved checks.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00284 Published 2024-03-08 Fixed in 12.7.4, 13.6.5 +1 CWE-269

Vulnerabilities

Filters