Vulnerabilities

TI-2024-27227 CVE-2024-40848 · GHSA-m9g4-52vh-fwwv

Apple macOS: An attacker may be able to read sensitive information

LOW 34

A downgrade issue was addressed with additional code-signing restrictions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00709 Published 2024-09-16 Fixed in 13.7, 14.7 +1

TI-2024-29732 CVE-2024-44165 · GHSA-3m65-xvh4-3hm8

Apple iOS and iPadOS: Network traffic may leak outside a VPN tunnel

LOW 34

A logic issue was addressed with improved checks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00784 Published 2024-09-16 Fixed in 17.7, 18 +4

TI-2024-27223 CVE-2024-40844 · GHSA-m548-7rvw-m5fc

Apple iOS and iPadOS: An app may be able to observe data displayed to the user by…

LOW 24

A privacy issue was addressed with improved handling of temporary files.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00231 Published 2024-09-16 Fixed in 17.7, 13.7 +2

TI-2024-29736 CVE-2024-44169 · GHSA-6fh7-538c-g5qv

Uncontrolled resource consumption in Apple iOS and iPadOS

LOW 38

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00556 Published 2024-09-16 Fixed in 17.7, 18 +5 CWE-400

TI-2024-29699 CVE-2024-44128 · GHSA-mrp4-v2gf-6mxp

Apple macOS: An Automator Quick Action workflow may be able to bypass Gatekeeper

LOW 24

This issue was addressed by adding an additional prompt for user consent.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00232 Published 2024-09-16 Fixed in 13.7, 14.7 +1 CWE-841

TI-2024-29756 CVE-2024-44190 · GHSA-wjmr-4ghf-rh39

Path traversal in Apple macOS

LOW 24

A path handling issue was addressed with improved validation.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00247 Published 2024-09-16 Fixed in 13.7, 14.7 +1 CWE-22

TI-2024-29735 CVE-2024-44168 · GHSA-r5fv-vx8p-jvrq

Uncontrolled search path in Apple macOS

LOW 24

A library injection issue was addressed with additional restrictions.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00247 Published 2024-09-16 Fixed in 13.7, 14.7 +1 CWE-114

TI-2024-29731 CVE-2024-44164 · GHSA-fqgr-5868-7mf7

Apple iOS and iPadOS: An app may be able to bypass Privacy preferences

LOW 31

This issue was addressed with improved checks.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00234 Published 2024-09-16 Fixed in 17.7, 13.7 +2

TI-2024-29730 CVE-2024-44163 · GHSA-hcj6-hxx2-6wpj

Information disclosure in Apple macOS

LOW 24

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00233 Published 2024-09-16 Fixed in 13.7, 14.7 +1 CWE-200

TI-2024-18483 CVE-2024-27876 · GHSA-976w-rfcm-5cfg

Race condition in Apple iOS and iPadOS

LOW 38

A race condition was addressed with improved locking.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00492 Published 2024-09-16 Fixed in 17.7, 18 +4 CWE-362

TI-2024-29725 CVE-2024-44158 · GHSA-qm78-568c-wg6m

Information disclosure in Apple iOS and iPadOS

LOW 24

This issue was addressed with improved redaction of sensitive information.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0024 Published 2024-09-16 Fixed in 17.7, 13.7 +2 CWE-200

TI-2024-29744 CVE-2024-44178 · GHSA-j962-w243-6g33

Out-of-bounds write in Apple macOS

LOW 24

This issue was addressed with improved validation of symlinks.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00251 Published 2024-09-16 Fixed in 13.7, 14.7 +1 CWE-787

TI-2024-29747 CVE-2024-44181 · GHSA-qcjx-5p37-v6hf

Information disclosure in Apple macOS

LOW 24

An issue was addressed with improved handling of temporary files.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00215 Published 2024-09-16 Fixed in 13.7, 14.7 +1 CWE-200

TI-2024-29748 CVE-2024-44182 · GHSA-v64w-2rh7-3gvr

Information disclosure in Apple macOS

LOW 24

This issue was addressed with improved redaction of sensitive information.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00215 Published 2024-09-16 Fixed in 13.7, 14.7 +1 CWE-200

TI-2024-29743 CVE-2024-44177 · GHSA-q7q2-gf23-qgjw

Apple macOS: An app may be able to access user-sensitive data

LOW 24

A privacy issue was addressed by removing sensitive data.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00215 Published 2024-09-16 Fixed in 13.7, 14.7 +1

TI-2024-29728 CVE-2024-44161 · GHSA-p5c3-cc8j-cvfq

Out-of-bounds read in Apple macOS

LOW 24

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00259 Published 2024-09-16 Fixed in 13.7, 14.7 +1 CWE-125

TI-2024-29727 CVE-2024-44160 · GHSA-382w-q3v4-xc76

Uncontrolled resource consumption in Apple macOS

LOW 37

A buffer overflow issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00482 Published 2024-09-16 Fixed in 13.7, 14.7 +1 CWE-400

TI-2024-29742 CVE-2024-44176 · GHSA-fvmx-5p62-pxm8

Uncontrolled resource consumption in Apple iOS and iPadOS

LOW 36

An out-of-bounds access issue was addressed with improved bounds checking.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.07939 Published 2024-09-16 Fixed in 17.7, 18 +5 CWE-400

TI-2024-27173 CVE-2024-40791 · GHSA-h498-88jq-wh8m

Sensitive information in log files in Apple iOS and iPadOS

LOW 16

A privacy issue was addressed with improved private data redaction for log entries.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00244 Published 2024-09-16 Fixed in 17.7, 18 +3 CWE-532

TI-2024-29749 CVE-2024-44183 · GHSA-m4c2-8cgc-49gg

Uncontrolled resource consumption in Apple iOS and iPadOS

LOW 24

A logic error was addressed with improved error handling.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00257 Published 2024-09-16 Fixed in 17.7, 18 +5 CWE-400

TI-2024-29734 CVE-2024-44167 · GHSA-22rq-cmx2-gvr4

Path traversal in Apple iOS and iPadOS

LOW 38

This issue was addressed by removing the vulnerable code.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00626 Published 2024-09-16 Fixed in 18, 13.7 +3 CWE-22

TI-2024-29750 CVE-2024-44184 · GHSA-38j2-mm6q-835r

Information disclosure in Apple iOS and iPadOS

LOW 24

A permissions issue was addressed with additional restrictions.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00215 Published 2024-09-16 Fixed in 17.7, 18 +3 CWE-200

TI-2024-27229 CVE-2024-40850 · GHSA-3w22-q3jv-89jw

Information disclosure in Apple iOS and iPadOS

LOW 25

A file access issue was addressed with improved input validation.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00273 Published 2024-09-16 Fixed in 17.7, 18 +5 CWE-200

TI-2024-29718 CVE-2024-44151 · GHSA-9g9q-cf56-cfh9

Incorrect default permissions in Apple macOS

LOW 29

A permissions issue was addressed with additional restrictions.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00487 Published 2024-09-16 Fixed in 13.7, 14.7 +1 CWE-276

TI-2024-27179 CVE-2024-40797 · GHSA-cw5r-673r-7ww3

Apple macOS: Visiting a malicious website may lead to user interface spoofing

LOW 28

This issue was addressed through improved state management.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00487 Published 2024-09-16 Fixed in 13.7, 14.7 +1

Vulnerabilities

Filters