Vulnerabilities (CVE)

Filtered by vendor Apple Subscribe
Total 12581 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-23264 1 Apple 5 Ipados, Iphone Os, Macos and 2 more 2024-12-09 N/A 5.5 MEDIUM
A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Monterey 12.7.4, macOS Ventura 13.6.5, macOS Sonoma 14.4, visionOS 1.1, iOS 17.4 and iPadOS 17.4, iOS 16.7.6 and iPadOS 16.7.6, tvOS 17.4. An application may be able to read restricted memory.
CVE-2024-23265 1 Apple 6 Ipados, Iphone Os, Macos and 3 more 2024-12-09 N/A 7.8 HIGH
A memory corruption vulnerability was addressed with improved locking. This issue is fixed in macOS Monterey 12.7.4, macOS Ventura 13.6.5, macOS Sonoma 14.4, visionOS 1.1, iOS 17.4 and iPadOS 17.4, watchOS 10.4, iOS 16.7.6 and iPadOS 16.7.6, tvOS 17.4. An app may be able to cause unexpected system termination or write kernel memory.
CVE-2024-23283 1 Apple 3 Ipados, Iphone Os, Macos 2024-12-09 N/A 5.5 MEDIUM
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app may be able to access user-sensitive data.
CVE-2024-23290 1 Apple 5 Ipados, Iphone Os, Macos and 2 more 2024-12-09 N/A 5.5 MEDIUM
A logic issue was addressed with improved restrictions. This issue is fixed in tvOS 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, watchOS 10.4. An app may be able to access user-sensitive data.
CVE-2024-23286 1 Apple 6 Ipados, Iphone Os, Macos and 3 more 2024-12-09 N/A 7.8 HIGH
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.7.4, macOS Ventura 13.6.5, macOS Sonoma 14.4, visionOS 1.1, iOS 17.4 and iPadOS 17.4, watchOS 10.4, iOS 16.7.6 and iPadOS 16.7.6, tvOS 17.4. Processing an image may lead to arbitrary code execution.
CVE-2024-23298 1 Apple 1 Xcode 2024-12-09 N/A 5.5 MEDIUM
A logic issue was addressed with improved state management.
CVE-2024-23289 1 Apple 4 Ipados, Iphone Os, Macos and 1 more 2024-12-09 N/A 3.3 LOW
A lock screen issue was addressed with improved state management. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, watchOS 10.4. A person with physical access to a device may be able to use Siri to access private calendar information.
CVE-2024-23291 1 Apple 5 Ipados, Iphone Os, Macos and 2 more 2024-12-09 N/A 3.3 LOW
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in tvOS 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, watchOS 10.4. A malicious app may be able to observe user data in log entries related to accessibility notifications.
CVE-2024-23262 1 Apple 3 Ipados, Iphone Os, Visionos 2024-12-09 N/A 3.3 LOW
This issue was addressed with additional entitlement checks. This issue is fixed in visionOS 1.1, iOS 17.4 and iPadOS 17.4, iOS 16.7.6 and iPadOS 16.7.6. An app may be able to spoof system notifications and UI.
CVE-2024-23285 1 Apple 1 Macos 2024-12-07 N/A 5.5 MEDIUM
This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sonoma 14.4. An app may be able to create symlinks to protected regions of the disk.
CVE-2024-23280 4 Apple, Fedoraproject, Webkitgtk and 1 more 9 Ipad Os, Iphone Os, Macos and 6 more 2024-12-07 N/A 6.5 MEDIUM
An injection issue was addressed with improved validation. This issue is fixed in Safari 17.4, macOS Sonoma 14.4, iOS 17.4 and iPadOS 17.4, watchOS 10.4, tvOS 17.4. A maliciously crafted webpage may be able to fingerprint the user.
CVE-2024-23281 1 Apple 1 Macos 2024-12-07 N/A 5.5 MEDIUM
This issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14.4. An app may be able to access sensitive user data.
CVE-2024-23279 1 Apple 1 Macos 2024-12-07 N/A 5.5 MEDIUM
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma 14.4. An app may be able to access user-sensitive data.
CVE-2024-23269 1 Apple 1 Macos 2024-12-07 N/A 5.5 MEDIUM
A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sonoma 14.4, macOS Monterey 12.7.4, macOS Ventura 13.6.5. An app may be able to modify protected parts of the file system.
CVE-2024-44123 1 Apple 3 Ipados, Iphone Os, Macos 2024-12-06 N/A 2.3 LOW
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15, iOS 18 and iPadOS 18. A malicious app with root privileges may be able to access keyboard input and location information without user consent.
CVE-2022-42792 1 Apple 2 Ipados, Iphone Os 2024-12-06 N/A 5.5 MEDIUM
This issue was addressed with improved data protection. This issue is fixed in iOS 16.1 and iPadOS 16. An app may be able to read sensitive location information
CVE-2022-42807 1 Apple 1 Macos 2024-12-06 N/A 4.3 MEDIUM
A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13. A user may accidentally add a participant to a Shared Album by pressing the Delete key
CVE-2024-44251 1 Apple 2 Ipados, Iphone Os 2024-12-06 N/A 2.4 LOW
This issue was addressed through improved state management. This issue is fixed in iOS 18.1 and iPadOS 18.1. An attacker may be able to view restricted content from the lock screen.
CVE-2024-23260 1 Apple 1 Macos 2024-12-06 N/A 5.5 MEDIUM
This issue was addressed by removing additional entitlements. This issue is fixed in macOS Sonoma 14.4. An app may be able to access user-sensitive data.
CVE-2024-44194 1 Apple 4 Ipados, Iphone Os, Visionos and 1 more 2024-12-06 N/A 5.5 MEDIUM
This issue was addressed with improved redaction of sensitive information. This issue is fixed in watchOS 11.1, visionOS 2.1, iOS 18.1 and iPadOS 18.1. An app may be able to access sensitive user data.