DeutschShown in its original language — a full translation is planned for a future version.
Apple macOS: Mehrere Schwachstellen
view advisory published 2024-12-11
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apple macOS ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand zu erzeugen, Sicherheitsmaßnahmen zu umgehen oder einen Man-in-the-Middle-Angriff durchzuführen.
01
describes (73)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-54568US | — | — | ||
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.2. Parsing a maliciously crafted file may lead to an unexpected app termination. | ||||
| CVE-2024-44271US | — | — | ||
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2. An app may be able to record the screen without an indicator. | ||||
| CVE-2024-54565US | — | — | ||
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2. An app may be able to access sensitive user data. | ||||
| CVE-2024-54559US | — | — | ||
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2. An app may be able to access sensitive user data. | ||||
| CVE-2024-54525US | — | — | ||
A logic issue was addressed with improved file handling. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, tvOS 18.2, visionOS 2.2, watchOS 11.2. Restoring a mal… | ||||
| CVE-2024-54557US | high7.5 | — | ||
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An attacker may gain access to protect… | ||||
| CVE-2024-54550US | —OT elevated | — | ||
This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2. An app may be able to view autocompl… | ||||
| CVE-2024-54549US | medium5.5 | — | ||
This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15.2. An app may be able to access user-sensitive data. | ||||
| CVE-2024-54547US | — | — | ||
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app may be able to access protected user data… | ||||
| CVE-2024-54542US | —OT elevated | — | ||
An authentication issue was addressed with improved state management. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, watchOS 11.2. Private Browsi… | ||||
| CVE-2024-54541US | medium5.5 | — | ||
This issue was addressed through improved state management. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2, tvOS 18.… | ||||
| CVE-2024-54539US | — | — | ||
This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app may be able to capture keyb… | ||||
| CVE-2024-54537US | high8.2OT elevated | — | ||
This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app may be able to read and wr… | ||||
| CVE-2024-54536US | medium5.5 | — | ||
The issue was addressed with improved validation of environment variables. This issue is fixed in macOS Sequoia 15.2. An app may be able to edit NVRAM variables. | ||||
| CVE-2024-54530US | —OT elevated | — | ||
The issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, visionOS 2.2, watchOS 11.2. Password autofill may fill in passwor… | ||||
| CVE-2024-54523US | medium6.3 | — | ||
The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, tvOS 18.2, watchOS 11.2. An app may be able to corrupt cop… | ||||
| CVE-2024-54522US | high7.8 | — | ||
The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, tvOS 18.2, watchOS 11.2. An app may be able to corrupt cop… | ||||
| CVE-2024-54520US | medium5.5 | — | ||
A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app may be able to overwrite… | ||||
| CVE-2024-54519US | medium5.5 | — | ||
The issue was resolved by sanitizing logging. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2. An app may be able to read sensitive location information. | ||||
| CVE-2024-54518US | medium5.3 | — | ||
The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, tvOS 18.2, watchOS 11.2. An app may be able to corrupt cop… | ||||
showing 20 of 73
02
references
External citations — patches, advisories, analysis.
- Cyber Security News vom 2025-01-12external
- PoC auf GitHub vom 2025-01-12external
- Mickey's Blogs vom 2025-01-08external
- Apple Security Announce vom 2024-12-11external
- Apple Security Announce vom 2024-12-11external
- Apple Security Announce vom 2024-12-11external
- WID-SEC-W-2024-3692 - CSAF Versionself
- WID-SEC-2024-3692 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan