Vulnerabilities

TI-2024-18444 CVE-2024-27830 · GHSA-rw6q-xw3r-fxvm

Apple Safari: A maliciously crafted webpage may be able to fingerprint the user

LOW 30

This issue was addressed through improved state management.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0065 Published 2024-06-10 Fixed in 17.5, 14.5 +2

TI-2024-18464 CVE-2024-27851 · GHSA-7x84-wx2f-425f

Memory corruption in Apple Safari

MEDIUM 42

The issue was addressed with improved bounds checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2024-06-10 Partial fix · 17.5, 14.5 +2 CWE-119

TI-2024-18420 CVE-2024-27806 · GHSA-p457-rwhw-j6q4

Information disclosure in Apple iOS and iPadOS

LOW 24

This issue was addressed with improved environment sanitization.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00259 Published 2024-06-10 Fixed in 16.7.8, 17.5 +4 CWE-200

TI-2024-18425 CVE-2024-27811 · GHSA-596p-4hx4-frm9

Improper privilege management in Apple iOS and iPadOS

MEDIUM 48

The issue was addressed with improved checks.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00556 Published 2024-06-10 Fixed in 17.5, 14.5 +2 CWE-269

TI-2024-18414 CVE-2024-27800 · GHSA-v8pv-8xhp-96rh

Uncontrolled resource consumption in Apple iOS and iPadOS

LOW 32

This issue was addressed by removing the vulnerable code.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00604 Published 2024-06-10 Fixed in 16.7.8, 17.5 +5 CWE-400

TI-2024-18434 CVE-2024-27820 · GHSA-qvvc-v3mj-qch5

Memory corruption in Apple Safari

MEDIUM 48

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01016 Published 2024-06-10 Partial fix · 17.5, 16.7.8 +3 CWE-119

TI-2024-18454 CVE-2024-27840 · GHSA-39m6-6wm4-cm5w

Apple iOS and iPadOS: An attacker that has already achieved kernel code execution may be…

MEDIUM 40

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.5 Local High privileges No interaction EPSS 0.0025 Published 2024-06-10 Fixed in 16.7.8, 17.5 +4 CWE-786

TI-2024-18415 CVE-2024-27801 · GHSA-wwpw-6x6h-qhvr

Apple iOS and iPadOS: An app may be able to elevate privileges

HIGH 78

The issue was addressed with improved checks.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00356 Published 2024-06-10 Fixed in 17.5, 14.5 +2

TI-2024-18428 CVE-2024-27814 · GHSA-mv5f-f7c2-2pg5

Information disclosure in Apple watchOS

LOW 12

This issue was addressed through improved state management.

CVSS 3.1LOW 2.4 Physical No auth No interaction EPSS 0.00273 Published 2024-06-10 Fixed in 10.5 CWE-200

TI-2024-18452 CVE-2024-27838 · GHSA-j24x-6m7r-h4gp

Cross-site scripting in Apple Safari

LOW 30

The issue was addressed by adding additional logic.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00732 Published 2024-06-10 Partial fix · 17.5, 16.7.8 +3 CWE-79

TI-2024-15357 CVE-2024-23251 · GHSA-g3vc-vgcj-26vj

Improper authentication in Apple iOS and iPadOS

LOW 21

An authentication issue was addressed with improved state management.

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00374 Published 2024-06-10 Fixed in 16.7.8, 17.5 +2 CWE-287

TI-2024-18429 CVE-2024-27815 · GHSA-r6h9-62mm-q9wm

Out-of-bounds write in Apple iOS and iPadOS

HIGH 69

An out-of-bounds write issue was addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02047 Published 2024-06-10 Fixed in 17.5, 14.5 +2 CWE-787

TI-2024-18422 CVE-2024-27808 · GHSA-pwf2-5r2p-9c9w

Apple Safari: Processing web content may lead to arbitrary code execution

MEDIUM 42

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0118 Published 2024-06-10 Partial fix · 17.5, 14.5 +2 CWE-786

TI-2024-18446 CVE-2024-27832 · GHSA-c5vq-9hf6-g7cw

Apple iOS and iPadOS: An app may be able to elevate privileges

MEDIUM 48

The issue was addressed with improved checks.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00587 Published 2024-06-10 Fixed in 17.5, 14.5 +2 CWE-703

TI-2024-15387 CVE-2024-23282 · GHSA-rx6g-pr26-7gxj

Apple iOS and iPadOS: A maliciously crafted email may be able to initiate FaceTime calls…

LOW 24

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00237 Published 2024-06-10 Fixed in 16.7.8, 17.5 +2 CWE-552

TI-2024-18442 CVE-2024-27828 · GHSA-jpjh-5cvh-hrp7

Apple iOS and iPadOS: An app may be able to execute arbitrary code with kernel privileges

LOW 36

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00266 Published 2024-06-10 Fixed in 17.5, 1.2 +1 CWE-786

TI-2024-18419 CVE-2024-27805 · GHSA-6jq2-3f4f-qgw5

Improper input validation in Apple iOS and iPadOS

LOW 24

An issue was addressed with improved validation of environment variables.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00248 Published 2024-06-10 Fixed in 16.7.8, 17.5 +4 CWE-20

Vulnerabilities

Filters