Vulnerabilities

TI-2024-36626 CVE-2024-54558 · GHSA-xq2q-rgqf-8r75

Apple iOS and iPadOS: An app may be able to trick a user into granting access to photos…

LOW 19

A clickjacking issue was addressed with improved out-of-process view handling.

CVSS 3.1LOW 2.8 Local Low privileges User interaction EPSS 0.00212 Published 2025-03-10 Fixed in 18, 15 CWE-451

TI-2024-36551 CVE-2024-54467 · GHSA-fvpp-8m58-5wxr

LOW 30

A cookie management issue was addressed with improved state management.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00632 Published 2025-03-10 Partial fix · 18, 15 +2 CWE-200

TI-2024-29745 CVE-2024-44179 · GHSA-jgq3-jm34-rx5m

LOW 12

This issue was addressed by restricting options offered on a locked device.

CVSS 3.1LOW 2.4 Physical No auth No interaction EPSS 0.00292 Published 2025-03-10 Fixed in 17.7, 18 +1 CWE-200

TI-2024-29789 CVE-2024-44227 · GHSA-784j-68hm-864c

LOW 39

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00448 Published 2025-03-10 Fixed in 18, 15 CWE-400

TI-2024-36618 CVE-2024-54546 · GHSA-gc6p-fh5j-358p

LOW 39

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00445 Published 2025-03-10 Fixed in 15 CWE-400

TI-2024-36548 CVE-2024-54463 · GHSA-68pv-q73m-p25v

LOW 24

This issue was addressed with improved entitlements.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00244 Published 2025-03-10 Fixed in 15 CWE-200

TI-2024-36628 CVE-2024-54560 · GHSA-wpm6-95m5-fpxf

LOW 24

A logic issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00234 Published 2025-03-10 Fixed in 18, 15 +1 CWE-269

TI-2024-29758 CVE-2024-44192 · GHSA-4j4j-rc2f-g9m5

LOW 29

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00447 Published 2025-03-10 Partial fix · 18, 15 +2 CWE-400

TI-2024-36556 CVE-2024-54473 · GHSA-7xpc-3wwm-65fg

LOW 24

This issue was addressed with improved redaction of sensitive information.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00245 Published 2025-03-10 Fixed in 15 CWE-200