Vulnerabilities

TI-2024-36591 CVE-2024-54515 · GHSA-gqhm-prc4-8m4c

Apple macOS: A malicious app may be able to gain root privileges

LOW 35

A logic issue was addressed with improved restrictions.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00214 Published 2024-12-11 Fixed in 15.2 CWE-281

TI-2024-36571 CVE-2024-54493 · GHSA-hw5x-h98r-cfjc

Apple macOS: Privacy indicators for microphone access may be attributed incorrectly

LOW 15

This issue was addressed through improved state management.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00218 Published 2024-12-11 Fixed in 15.2

TI-2024-36564 CVE-2024-54485 · GHSA-w7rc-39gw-qjww

Insecure storage of sensitive information in Apple iOS and iPadOS

LOW 25

The issue was addressed by adding additional logic.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00286 Published 2024-12-11 Fixed in 18.2, 17.7.3 +1 CWE-922

TI-2024-36563 CVE-2024-54484 · GHSA-97qm-2h4w-qghq

Sensitive information in log files in Apple macOS

LOW 24

The issue was resolved by sanitizing logging.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00223 Published 2024-12-11 Fixed in 15.2 CWE-281

TI-2024-36570 CVE-2024-54492 · GHSA-jw8x-5w8f-9hrm

Apple iOS and iPadOS: An attacker in a privileged network position may be able to alter…

MEDIUM 51

This issue was addressed by using HTTPS when sending information over the network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00879 Published 2024-12-11 Fixed in 18.2, 17.7.3 +2

TI-2024-36579 CVE-2024-54502 · GHSA-w64q-ccr3-358g

Out-of-bounds read in Apple Safari

MEDIUM 46

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.17137 Published 2024-12-11 Partial fix · 18.2, 17.7.6 +3 CWE-125

TI-2024-36608 CVE-2024-54534 · GHSA-83g6-wm8c-3hx9

Out-of-bounds write in Apple Safari

MEDIUM 45

The issue was addressed with improved memory handling.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01045 Published 2024-12-11 Partial fix · 18.2, 17.7.6 +3 CWE-787

TI-2024-36582 CVE-2024-54505 · GHSA-qfp8-pvg8-2xph

Type confusion in Apple Safari

MEDIUM 42

A type confusion issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0107 Published 2024-12-11 Partial fix · 18.2, 17.7.3 +3 CWE-843

TI-2024-36589 CVE-2024-54513 · GHSA-fw24-x4v5-9x55

Apple iOS and iPadOS: An app may be able to access sensitive user data

LOW 25

A permissions issue was addressed with additional restrictions.

CVSS 3.1MEDIUM 5.7 Adjacent network No auth User interaction EPSS 0.00259 Published 2024-12-11 Fixed in 18.2, 15.2 +2 CWE-281

TI-2024-29807 CVE-2024-44246 · GHSA-c9mr-7r2v-xjc9

Out-of-bounds read in Apple Safari

LOW 26

The issue was addressed with improved routing of Safari-originated requests.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01121 Published 2024-12-11 Fixed in 18.2, 17.7.3 +1 CWE-125

TI-2024-36599 CVE-2024-54524 · GHSA-hf45-h325-58j2

Type confusion in Apple macOS

LOW 24

A logic issue was addressed with improved file handling.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.0024 Published 2024-12-11 Fixed in 15.2 CWE-843

TI-2024-36585 CVE-2024-54508 · GHSA-rq2m-fjrh-fqx7

Out-of-bounds read in Apple Safari

LOW 35

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00967 Published 2024-12-11 Partial fix · 18.2, 17.7.6 +3 CWE-125

TI-2024-36581 CVE-2024-54504 · GHSA-jf72-28rf-27vg

Insecure storage of sensitive information in Apple macOS

LOW 24

A privacy issue was addressed with improved private data redaction for log entries.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00208 Published 2024-12-11 Fixed in 15.2 CWE-922

TI-2024-36606 CVE-2024-54531 · GHSA-f482-9qmq-phw9

Apple macOS: An app may be able to bypass kASLR

LOW 24

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00218 Published 2024-12-11 Fixed in 15.2

TI-2024-36583 CVE-2024-54506 · GHSA-7r2p-cp9x-c68f

Out-of-bounds read in Apple macOS

MEDIUM 50

An out-of-bounds access issue was addressed with improved bounds checking.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00695 Published 2024-12-11 Fixed in 15.2 CWE-125

TI-2024-36562 CVE-2024-54479 · GHSA-hp58-68h4-82p8

Apple Safari: Processing maliciously crafted web content may lead to an unexpected…

MEDIUM 42

The issue was addressed with improved checks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01585 Published 2024-12-11 Partial fix · 18.2, 17.7.3 +3

TI-2024-36569 CVE-2024-54491 · GHSA-wmx6-8gph-wm9j

The issue was resolved by sanitizing logging.

LOW 24

The issue was resolved by sanitizing logging.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00225 Published 2024-12-11 Fixed in 15.2

TI-2024-36568 CVE-2024-54490 · GHSA-v9c2-w942-7r95

Origin validation error in Apple macOS

LOW 24

This issue was addressed by enabling hardened runtime.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00144 Published 2024-12-11 Fixed in 15.2 CWE-346

TI-2024-36549 CVE-2024-54465 · GHSA-887q-rm9x-7wg9

Apple macOS: An app may be able to elevate privileges

MEDIUM 44

A logic issue was addressed with improved state management.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00622 Published 2024-12-11 Fixed in 15.2 CWE-281

Vulnerabilities

Filters