Vulnerabilities

TI-2024-27196 CVE-2024-40815 · GHSA-mxhg-mc93-9g8m

Cross-site request forgery in Apple iOS and iPadOS

LOW 37

A race condition was addressed with additional validation.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.0109 Published 2024-07-29 Fixed in 17.6, 13.6.8 +2 CWE-352

TI-2024-27166 CVE-2024-40784 · GHSA-4j6f-p6g5-r4mh

LOW 36

An integer overflow was addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0029 Published 2024-07-29 Fixed in 16.7.9, 17.6 +4 CWE-190

TI-2024-27199 CVE-2024-40818 · GHSA-g4wx-99hh-6pg8

LOW 21

This issue was addressed by restricting options offered on a locked device.

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00413 Published 2024-07-29 Fixed in 16.7.9, 17.6 +3