DeutschShown in its original language — a full translation is planned for a future version.
Apple macOS: Mehrere Schwachstellen
view advisory published 2024-09-16
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apple macOS ausnutzen, um seine Privilegien zu erhöhen, einen Denial-of-Service-Zustand herbeizuführen, Spoofing-Angriffe durchzuführen, Daten zu ändern, Sicherheitsmaßnahmen zu umgehen und vertrauliche Informationen offenzulegen
01
describes (112)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-54560US | medium5.5 | — | ||
A logic issue was addressed with improved checks. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15, tvOS 18, watchOS 11. A malicious app may be able to modify other ap… | ||||
| CVE-2024-54558US | — | — | ||
A clickjacking issue was addressed with improved out-of-process view handling. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An app may be able to trick a user int… | ||||
| CVE-2024-54546US | high7.5 | — | ||
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15. An app may be able to cause unexpected system termination or corrupt kernel memory. | ||||
| CVE-2024-54473US | medium5.5 | — | ||
This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15. An app may be able to access user-sensitive data. | ||||
| CVE-2024-54469US | medium5.5 | — | ||
The issue was addressed with improved checks. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7, visionOS 2. A local user may be… | ||||
| CVE-2024-54467US | medium6.5 | — | ||
A cookie management issue was addressed with improved state management. This issue is fixed in Safari 18, iOS 18 and iPadOS 18, macOS Sequoia 15, tvOS 18, visionOS 2, watchOS 11. A… | ||||
| CVE-2024-54463US | medium5.5 | — | ||
This issue was addressed with improved entitlements. This issue is fixed in macOS Sequoia 15. An app may be able to access removable volumes without user consent. | ||||
| CVE-2024-44227US | high7.5 | — | ||
The issue was addressed with improved memory handling. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An app may be able to cause unexpected system termination or c… | ||||
| CVE-2024-44192US | medium5.5 | — | ||
The issue was addressed with improved checks. This issue is fixed in Safari 18, iOS 18 and iPadOS 18, macOS Sequoia 15, tvOS 18, visionOS 2, watchOS 11. Processing maliciously craf… | ||||
| CVE-2024-44179US | — | — | ||
This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15. An attacker wit… | ||||
| CVE-2024-54658US | medium6.5 | — | ||
The issue was addressed with improved memory handling. This issue is fixed in Safari 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, watchOS 10.4. Proce… | ||||
| CVE-2024-27859US | high8.8 | — | ||
The issue was addressed with improved memory handling. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, watchOS 10.4. Processing web con… | ||||
| CVE-2024-44172US | low3.3OT elevated | — | ||
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may b… | ||||
| CVE-2024-44145US | medium6.1OT elevated | — | ||
This issue was addressed through improved state management. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An attacker with physical access to a macOS device with S… | ||||
| CVE-2024-44208US | high7.5OT elevated | — | ||
This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15. An app may be able to bypass certain Privacy preferences. | ||||
| CVE-2024-44203US | high7.5 | — | ||
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. An app may be able to access a user's Photos Library. | ||||
| CVE-2024-44175US | medium5.5 | — | ||
This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7.1. An app may be able to access sensitive user data. | ||||
| CVE-2024-44174US | medium5.5 | — | ||
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15. An attacker may be able to view restricted content from the lock screen. | ||||
| CVE-2024-44155US | medium6.5 | — | ||
A custom URL scheme handling issue was addressed with improved input validation. This issue is fixed in Safari 18, iOS 17.7.1 and iPadOS 17.7.1, iOS 18 and iPadOS 18, macOS Sequoia… | ||||
| CVE-2024-44144US | medium5.5 | — | ||
A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7.1, tvO… | ||||
showing 20 of 112
02
references
External citations — patches, advisories, analysis.
- APPLE-SA-09-16-2024-2 macOS Sequoia 15 vom 2024-09-16external
- APPLE-SA-09-16-2024-9 macOS Sonoma 14.7 vom 2024-09-16external
- APPLE-SA-09-16-2024-10 macOS Ventura 13.7 vom 2024-09-16external
- About the security content of macOS Ventura 13.7 vom 2024-09-16external
- About the security content of macOS Sequoia 15 vom 2024-09-16external
- About the security content of macOS Sonoma 14.7 vom 2024-09-16external
- WID-SEC-W-2024-2154 - CSAF Versionself
- WID-SEC-2024-2154 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan