DeutschShown in its original language — a full translation is planned for a future version.
Apple Xcode: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen
view advisory published 2024-09-16
Ein Angreifer kann mehrere Schwachstellen in Apple Xcode ausnutzen, um Informationen offenzulegen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-44228US | high7.5OT elevated | — | ||
This issue was addressed with improved permissions checking. This issue is fixed in Xcode 16. An app may be able to inherit Xcode permissions and access user data. | ||||
| CVE-2024-44191US | medium5.5 | — | ||
This issue was addressed through improved state management. This issue is fixed in Xcode 16, iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15, tvOS 18, visionOS 2,… | ||||
| CVE-2024-44162US | high7.8OT elevated | — | ||
This issue was addressed by enabling hardened runtime. This issue is fixed in Xcode 16. A malicious application may gain access to a user's Keychain items. | ||||
| CVE-2024-40862US | medium5.3 | — | ||
A privacy issue was addressed by removing sensitive data. This issue is fixed in Xcode 16. An attacker may be able to determine the Apple ID of the owner of the computer. | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan