Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

20 records

Release: Apple visionOS 2.1 Clear all filters
TI-2024-29839 CVE-2024-44282 · GHSA-7mw3-c8c6-gh37

Out-of-bounds read in Apple iOS and iPadOS

Priority LOW 30

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00806 Published 2024-10-28 Fixed in 17.7.1, 18.1 +5 CWE-125
TI-2024-29834 CVE-2024-44277 · GHSA-qcfq-rrwc-fg96

Out-of-bounds write in Apple iOS and iPadOS

Priority LOW 34

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00236 Published 2024-10-28 Fixed in 18.1, 15.1 +1 CWE-787
TI-2024-29842 CVE-2024-44285 · GHSA-8c5r-55p8-8p8m

Use after free in Apple iOS and iPadOS

Priority LOW 39

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00659 Published 2024-10-28 Fixed in 18.1, 15.1 +2 CWE-416
TI-2024-29805 CVE-2024-44244 · GHSA-jpwg-q62q-pwpw

Out-of-bounds write in Apple Safari

Priority LOW 22

A memory corruption issue was addressed with improved input validation.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00963 Published 2024-10-28 Partial fix · 18.1, 15.1 +2 CWE-787
TI-2024-29830 CVE-2024-44273 · GHSA-ghqj-2wp8-298g

Link following in Apple iOS and iPadOS

Priority LOW 25

This issue was addressed with improved handling of symlinks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00278 Published 2024-10-28 Fixed in 18.1, 14.7.1 +3 CWE-59
TI-2024-29818 CVE-2024-44258 · GHSA-wpcr-qwq5-j6w2

Link following in Apple iOS and iPadOS

Priority MEDIUM 64

This issue was addressed with improved handling of symlinks.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00751 Published 2024-10-28 Fixed in 17.7.1, 18.1 +1 CWE-59
TI-2024-29800 CVE-2024-44239 · GHSA-2jwm-qv7q-9cc7

Sensitive information in log files in Apple iOS and iPadOS

Priority LOW 25

An information disclosure issue was addressed with improved private data redaction for log entries.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00273 Published 2024-10-28 Fixed in 17.7.1, 18.1 +5 CWE-532
TI-2024-29815 CVE-2024-44255 · GHSA-5fx2-6ffx-qmvv

Path traversal in Apple iOS and iPadOS

Priority LOW 38

A path handling issue was addressed with improved logic.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.0031 Published 2024-10-28 Fixed in 18.1, 13.7.1 +4 CWE-22