Vulnerabilities

TI-2024-36550 CVE-2024-54466 · GHSA-77pc-23q5-7vg9

Missing authorization in Apple macOS

LOW 30

An authorization issue was addressed with improved state management.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00713 Published 2024-12-11 Fixed in 13.7.2, 14.7.2 +1 CWE-862

TI-2024-36567 CVE-2024-54489 · GHSA-3m98-m7jj-v78v

Path traversal in Apple macOS

LOW 34

A path handling issue was addressed with improved validation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00371 Published 2024-12-11 Fixed in 13.7.2, 14.7.2 +1 CWE-22

TI-2024-36590 CVE-2024-54514 · GHSA-wm24-225r-44gm

Apple iOS and iPadOS: An app may be able to break out of its sandbox

LOW 39

The issue was addressed with improved checks.

CVSS 3.1HIGH 8.6 Local No auth User interaction EPSS 0.00251 Published 2024-12-11 Fixed in 18.2, 13.7.2 +3

TI-2024-36604 CVE-2024-54529 · GHSA-j4h9-xpvr-4pqq

Code injection in Apple macOS

HIGH 69

A logic issue was addressed with improved checks.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0033 Published 2024-12-11 Fixed in 13.7.2, 14.7.2 +1 CWE-94

TI-2024-36559 CVE-2024-54476 · GHSA-w5q3-762f-g235

Observable discrepancy in Apple macOS

LOW 25

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00274 Published 2024-12-11 Fixed in 13.7.2, 14.7.2 +1 CWE-203

TI-2024-36560 CVE-2024-54477 · GHSA-7wvc-54wp-pv8x

Insecure storage of sensitive information in Apple macOS

LOW 25

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00274 Published 2024-12-11 Fixed in 13.7.2, 14.7.2 +1 CWE-922

TI-2024-36575 CVE-2024-54498 · GHSA-54w6-f3f8-54q2

Apple macOS: An app may be able to break out of its sandbox

MEDIUM 42

A path handling issue was addressed with improved validation.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.01125 Published 2024-12-11 Fixed in 13.7.2, 14.7.2 +1

TI-2024-36603 CVE-2024-54528 · GHSA-xw58-64fr-3323

Apple macOS: An app may be able to overwrite arbitrary files

LOW 31

A logic issue was addressed with improved restrictions.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00227 Published 2024-12-11 Fixed in 13.7.2, 14.7.2 +1

TI-2024-36572 CVE-2024-54494 · GHSA-q7qj-rx6w-8pxw

Race condition in Apple iOS and iPadOS

LOW 28

A race condition was addressed with additional validation.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00763 Published 2024-12-11 Fixed in 18.2, 17.7.3 +5 CWE-362

TI-2024-29847 CVE-2024-44291 · GHSA-wwr9-w57c-2f9m

Apple macOS: A malicious app may be able to gain root privileges

LOW 36

A logic issue was addressed with improved file handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00297 Published 2024-12-11 Fixed in 13.7.2, 14.7.2 +1

TI-2024-36602 CVE-2024-54527 · GHSA-xjr5-22cj-7cfp

Apple iOS and iPadOS: An app may be able to access sensitive user data

LOW 25

This issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0028 Published 2024-12-11 Fixed in 18.2, 13.7.2 +3

TI-2024-36557 CVE-2024-54474 · GHSA-xgmf-7r4h-7jjp

Apple macOS: An app may be able to access user-sensitive data

LOW 25

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00279 Published 2024-12-11 Fixed in 13.7.2, 14.7.2 +1

TI-2024-29788 CVE-2024-44225 · GHSA-9wm3-v99j-79rf

Apple iOS and iPadOS: An app may be able to gain elevated privileges

LOW 36

A logic issue was addressed with improved checks.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00306 Published 2024-12-11 Fixed in 18.2, 17.7.3 +4

TI-2024-29787 CVE-2024-44224 · GHSA-6p96-58pg-p58h

Incorrect default permissions in Apple macOS

LOW 36

A permissions issue was addressed with additional restrictions.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00252 Published 2024-12-11 Fixed in 13.7.2, 14.7.2 +1 CWE-276

TI-2024-36601 CVE-2024-54526 · GHSA-c3f2-9wv2-2gxf

Apple iOS and iPadOS: A malicious app may be able to access private information

LOW 31

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.03385 Published 2024-12-11 Fixed in 18.2, 13.7.2 +3

TI-2024-36587 CVE-2024-54510 · GHSA-58f5-8jq5-r8p2

Race condition in Apple iOS and iPadOS

LOW 23

A race condition was addressed with improved locking.

CVSS 3.1MEDIUM 5.1 Local No auth No interaction EPSS 0.00198 Published 2024-12-11 Fixed in 18.2, 17.7.3 +4 CWE-362

TI-2024-29856 CVE-2024-44300 · GHSA-v2gg-jq7f-8425

Apple macOS: An app may be able to access protected user data

LOW 25

A logic issue was addressed with improved file handling.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.0028 Published 2024-12-11 Fixed in 13.7.2, 14.7.2 +1

TI-2024-36578 CVE-2024-54501 · GHSA-372f-8jhc-h6mp

Resource allocation without limits in Apple iOS and iPadOS

LOW 25

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00314 Published 2024-12-11 Fixed in 18.2, 17.7.3 +5 CWE-770

TI-2024-36577 CVE-2024-54500 · GHSA-rmh8-223g-x64m

Apple iOS and iPadOS: Processing a maliciously crafted image may result in disclosure of…

LOW 25

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00315 Published 2024-12-11 Fixed in 18.2, 17.7.3 +5

TI-2024-36565 CVE-2024-54486 · GHSA-wj3x-pcf8-r7qm

Apple iOS and iPadOS: Processing a maliciously crafted font may result in the disclosure…

LOW 32

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01361 Published 2024-12-11 Fixed in 18.2, 17.7.3 +5

Vulnerabilities

Filters