Vulnerabilities

TI-2024-29801 CVE-2024-44240 · GHSA-87g7-f8g4-hxvm

Apple iOS and iPadOS: Processing a maliciously crafted font may result in the disclosure…

LOW 29

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00531 Published 2024-10-28 Fixed in 17.7.1, 18.1 +5

TI-2024-29839 CVE-2024-44282 · GHSA-7mw3-c8c6-gh37

Out-of-bounds read in Apple iOS and iPadOS

LOW 30

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00806 Published 2024-10-28 Fixed in 17.7.1, 18.1 +5 CWE-125

TI-2024-29842 CVE-2024-44285 · GHSA-8c5r-55p8-8p8m

Use after free in Apple iOS and iPadOS

LOW 39

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00659 Published 2024-10-28 Fixed in 18.1, 15.1 +2 CWE-416

TI-2024-29858 CVE-2024-44302 · GHSA-qvrv-r8xg-hh75

Apple iOS and iPadOS: Processing a maliciously crafted font may result in the disclosure…

LOW 25

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00514 Published 2024-10-28 Fixed in 17.7.1, 18.1 +5

TI-2024-29760 CVE-2024-44194 · GHSA-3xpf-325v-j848

Apple iOS and iPadOS: An app may be able to access sensitive user data

LOW 24

This issue was addressed with improved redaction of sensitive information.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00256 Published 2024-10-28 Fixed in 18.1, 15.1 +2

TI-2024-29805 CVE-2024-44244 · GHSA-jpwg-q62q-pwpw

Out-of-bounds write in Apple Safari

LOW 22

A memory corruption issue was addressed with improved input validation.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00963 Published 2024-10-28 Partial fix · 18.1, 15.1 +2 CWE-787

TI-2024-29830 CVE-2024-44273 · GHSA-ghqj-2wp8-298g

Link following in Apple iOS and iPadOS

LOW 25

This issue was addressed with improved handling of symlinks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00278 Published 2024-10-28 Fixed in 18.1, 14.7.1 +3 CWE-59

TI-2024-29827 CVE-2024-44269 · GHSA-f8f6-24mj-36m7

Apple iOS and iPadOS: A malicious app may use shortcuts to access restricted files

LOW 25

A logic issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00277 Published 2024-10-28 Fixed in 17.7.1, 18.1 +5

TI-2024-29831 CVE-2024-44274 · GHSA-jjpr-6x73-f9v6

Apple iOS and iPadOS: An attacker with physical access to a locked device may be able to…

LOW 22

The issue was addressed with improved authentication.

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00426 Published 2024-10-28 Fixed in 17.7.1, 18.1 +1

TI-2024-29814 CVE-2024-44254 · GHSA-wg5p-9v6g-ch4x

Apple iOS and iPadOS: An app may be able to access sensitive user data

LOW 24

This issue was addressed with improved redaction of sensitive information.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00263 Published 2024-10-28 Fixed in 18.1, 13.7.1 +3

TI-2024-29779 CVE-2024-44215 · GHSA-8545-3w77-w6gm

Apple iOS and iPadOS: Processing an image may result in disclosure of process memory

LOW 25

This issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00327 Published 2024-10-28 Fixed in 17.7.1, 18.1 +5

TI-2024-29800 CVE-2024-44239 · GHSA-2jwm-qv7q-9cc7

Sensitive information in log files in Apple iOS and iPadOS

LOW 25

An information disclosure issue was addressed with improved private data redaction for log entries.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00273 Published 2024-10-28 Fixed in 17.7.1, 18.1 +5 CWE-532

TI-2024-29835 CVE-2024-44278 · GHSA-xvc9-v5hw-8v8j

Apple iOS and iPadOS: A sandboxed app may be able to access sensitive user data in system…

LOW 24

An information disclosure issue was addressed with improved private data redaction for log entries.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00244 Published 2024-10-28 Fixed in 17.7.1, 18.1 +5

TI-2024-29853 CVE-2024-44297 · GHSA-j23c-hpvj-54p6

Apple iOS and iPadOS: Processing a maliciously crafted message may lead to a…

LOW 30

The issue was addressed with improved bounds checks.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00853 Published 2024-10-28 Fixed in 17.7.1, 18.1 +5

TI-2024-29852 CVE-2024-44296 · GHSA-vhv3-639r-j6rp

Apple Safari: Processing maliciously crafted web content may prevent Content Security…

LOW 26

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00662 Published 2024-10-28 Partial fix · 18.1, 17.7.1 +3

TI-2024-29815 CVE-2024-44255 · GHSA-5fx2-6ffx-qmvv

Path traversal in Apple iOS and iPadOS

LOW 38

A path handling issue was addressed with improved logic.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.0031 Published 2024-10-28 Fixed in 18.1, 13.7.1 +4 CWE-22

Vulnerabilities

Filters