Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-23276 State: PUBLISHED Published: 2024-03-08T01:35:18.583Z Last Updated: 2025-11-04T18:27:21.373Z Vendors: Apple Products: macOS Problem Types: An app may be able to elevate privileges Description: A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.4, macOS Monterey 12.7.4, macOS Ventura 13.6.5. An app may be able to elevate privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT214083 - https://support.apple.com/en-us/HT214085 - https://support.apple.com/en-us/HT214084 - http://seclists.org/fulldisclosure/2024/Mar/21 - http://seclists.org/fulldisclosure/202
pport.apple.com/en-us/HT214084 - http://seclists.org/fulldisclosure/2024/Mar/21 - http://seclists.org/fulldisclosure/2024/Mar/22 - http://seclists.org/fulldisclosure/2024/Mar/23
CVE ID: CVE-2024-23277 State: PUBLISHED Published: 2024-03-08T01:35:27.903Z Last Updated: 2025-11-04T18:27:23.755Z Vendors: Apple Products: iOS and iPadOS, macOS Problem Types: An attacker in a privileged network position may be able to inject keystrokes by spoofing a keyboard Description: The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.4, iOS 17.4 and iPadOS 17.4. An attacker in a privileged network position may be able to inject keystrokes by spoofing a keyboard. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214081 - https://support.apple.com/en-us/HT214084 - http://seclists.o
r: References: - https://support.apple.com/en-us/HT214081 - https://support.apple.com/en-us/HT214084 - http://seclists.org/fulldisclosure/2024/Mar/21
CVE ID: CVE-2024-23278 State: PUBLISHED Published: 2024-03-08T01:36:11.839Z Last Updated: 2025-11-04T18:27:29.652Z Vendors: Apple Products: tvOS, iOS and iPadOS, macOS, watchOS Problem Types: An app may be able to break out of its sandbox Description: The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.6.5, macOS Sonoma 14.4, iOS 17.4 and iPadOS 17.4, watchOS 10.4, iOS 16.7.6 and iPadOS 16.7.6, tvOS 17.4. An app may be able to break out of its sandbox. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214086 - https://support.apple.com/en-us/HT214081 - https://support.apple.com/en-us/H
https://support.apple.com/en-us/HT214086 - https://support.apple.com/en-us/HT214081 - https://support.apple.com/en-us/HT214082 - https://support.apple.com/en-us/HT214085 - https://support.apple.com/en-us/HT214084 - https://support.apple.com/en-us/HT214088 - https://support.apple.com/kb/HT214085 - http://seclists.org/fulldisclosure/2024/Mar/21 - http://seclists.org/fulldisclosure/2024/Mar/25 - http://seclists.org/fulldisclosure/2024/Mar/24 - http://seclists.org/fulldisclosure/2024/Mar/22
CVE ID: CVE-2024-23279 State: PUBLISHED Published: 2024-03-08T01:36:13.690Z Last Updated: 2025-11-04T18:27:30.870Z Vendors: Apple Products: macOS Problem Types: An app may be able to access user-sensitive data Description: A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma 14.4. An app may be able to access user-sensitive data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214084 - http://seclists.org/fulldisclosure/2024/Mar/21
CVE ID: CVE-2024-23280 State: PUBLISHED Published: 2024-03-08T01:36:14.625Z Last Updated: 2025-11-04T18:27:35.598Z Vendors: Apple Products: tvOS, iOS and iPadOS, Safari, macOS, watchOS Problem Types: A maliciously crafted webpage may be able to fingerprint the user Description: An injection issue was addressed with improved validation. This issue is fixed in Safari 17.4, macOS Sonoma 14.4, iOS 17.4 and iPadOS 17.4, watchOS 10.4, tvOS 17.4. A maliciously crafted webpage may be able to fingerprint the user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT214086 - https://support.apple.com/en-us/HT214081 - https://suppo
hment: References: - https://support.apple.com/en-us/HT214086 - https://support.apple.com/en-us/HT214081 - https://support.apple.com/en-us/HT214089 - https://support.apple.com/en-us/HT214084 - https://support.apple.com/en-us/HT214088 - http://seclists.org/fulldisclosure/2024/Mar/20 - http://seclists.org/fulldisclosure/2024/Mar/21 - http://seclists.org/fulldisclosure/2024/Mar/25 - http://seclists.org/fulldisclosure/2024/Mar/24 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BAIPBVDQV3GHMSNSZNEJCRZEPM7BEYGF/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AO4BNNL5X2LQBJ6WX7VT4SGMA6R7DUU5/ - https:
oraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AO4BNNL5X2LQBJ6WX7VT4SGMA6R7DUU5/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PXORDRCSQAQU436W4S2Z3X5B5PDXL3LI/ - http://www.openwall.com/lists/oss-security/2024/03/26/1 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IXLXIOAH5S7J22LJTCIAVFVVJ4TESAX4/
CVE ID: CVE-2024-23281 State: PUBLISHED Published: 2024-03-08T01:36:10.006Z Last Updated: 2025-11-04T18:27:36.787Z Vendors: Apple Products: macOS Problem Types: An app may be able to access sensitive user data Description: This issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14.4. An app may be able to access sensitive user data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT214084 - http://seclists.org/fulldisclosure/2024/Mar/21
CVE ID: CVE-2024-23282 State: PUBLISHED Published: 2024-06-10T20:56:36.998Z Last Updated: 2025-02-13T17:39:28.003Z Vendors: Apple Products: iOS and iPadOS, macOS, watchOS Problem Types: A maliciously crafted email may be able to initiate FaceTime calls without user authorization Description: The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.5, watchOS 10.5, iOS 17.5 and iPadOS 17.5, iOS 16.7.8 and iPadOS 16.7.8. A maliciously crafted email may be able to initiate FaceTime calls without user authorization. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT214101 - https://support.apple
ogram Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT214101 - https://support.apple.com/en-us/HT214100 - https://support.apple.com/en-us/HT214106 - https://support.apple.com/en-us/HT214104 - https://support.apple.com/kb/HT214104 - https://support.apple.com/kb/HT214100 - https://support.apple.com/kb/HT214106 - https://support.apple.com/kb/HT214101
CVE ID: CVE-2024-23283 State: PUBLISHED Published: 2024-03-08T01:35:21.358Z Last Updated: 2025-11-04T18:27:41.585Z Vendors: Apple Products: macOS, iOS and iPadOS Problem Types: An app may be able to access user-sensitive data Description: A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app may be able to access user-sensitive data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214083 - https://support.apple.com/en-us/HT214082 - https://support.apple.com/en-us/HT
https://support.apple.com/en-us/HT214083 - https://support.apple.com/en-us/HT214082 - https://support.apple.com/en-us/HT214085 - https://support.apple.com/en-us/HT214084 - http://seclists.org/fulldisclosure/2024/Mar/21 - http://seclists.org/fulldisclosure/2024/Mar/22 - http://seclists.org/fulldisclosure/2024/Mar/23
CVE ID: CVE-2024-23284 State: PUBLISHED Published: 2024-03-08T01:35:43.782Z Last Updated: 2025-11-04T18:27:47.552Z Vendors: Apple Products: visionOS, tvOS, iOS and iPadOS, Safari, macOS, watchOS Problem Types: Processing maliciously crafted web content may prevent Content Security Policy from being enforced Description: A logic issue was addressed with improved state management. This issue is fixed in tvOS 17.4, macOS Sonoma 14.4, visionOS 1.1, iOS 17.4 and iPadOS 17.4, watchOS 10.4, iOS 16.7.6 and iPadOS 16.7.6, Safari 17.4. Processing maliciously crafted web content may prevent Content Security Policy from being enforced. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnri
revent Content Security Policy from being enforced. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT214087 - https://support.apple.com/en-us/HT214086 - https://support.apple.com/en-us/HT214081 - https://support.apple.com/en-us/HT214082 - https://support.apple.com/en-us/HT214089 - https://support.apple.com/en-us/HT214084 - https://support.apple.com/en-us/HT214088 - http://seclists.org/fulldisclosure/2024/Mar/20 - http://seclists.org/fulldisclosure/2024/Mar/21 - http://seclists.org/fulldisclosure/2024/Mar/25 - http://seclists.org/fulldisclosure/2024/Mar/24 - http://seclists.org/fulldisclosure/2024/Mar/26 - https://list
/Mar/25 - http://seclists.org/fulldisclosure/2024/Mar/24 - http://seclists.org/fulldisclosure/2024/Mar/26 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BAIPBVDQV3GHMSNSZNEJCRZEPM7BEYGF/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AO4BNNL5X2LQBJ6WX7VT4SGMA6R7DUU5/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PXORDRCSQAQU436W4S2Z3X5B5PDXL3LI/ - http://www.openwall.com/lists/oss-security/2024/03/26/1 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IXLXIOAH5S7J22LJTCIAVFVVJ4TESAX4/
CVE ID: CVE-2024-23285 State: PUBLISHED Published: 2024-03-08T01:35:31.663Z Last Updated: 2025-11-04T18:27:48.727Z Vendors: Apple Products: macOS Problem Types: An app may be able to create symlinks to protected regions of the disk Description: This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sonoma 14.4. An app may be able to create symlinks to protected regions of the disk. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT214084 - http://seclists.org/fulldisclosure/2024/Mar/21
CVE ID: CVE-2024-23286 State: PUBLISHED Published: 2024-03-08T01:36:00.661Z Last Updated: 2025-11-04T18:27:57.031Z Vendors: Apple Products: visionOS, tvOS, iOS and iPadOS, macOS, watchOS Problem Types: Processing an image may lead to arbitrary code execution Description: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.7.4, macOS Ventura 13.6.5, macOS Sonoma 14.4, visionOS 1.1, iOS 17.4 and iPadOS 17.4, watchOS 10.4, iOS 16.7.6 and iPadOS 16.7.6, tvOS 17.4. Processing an image may lead to arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-
Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214087 - https://support.apple.com/en-us/HT214086 - https://support.apple.com/en-us/HT214081 - https://support.apple.com/en-us/HT214083 - https://support.apple.com/en-us/HT214082 - https://support.apple.com/en-us/HT214085 - https://support.apple.com/en-us/HT214084 - https://support.apple.com/en-us/HT214088 - http://seclists.org/fulldisclosure/2024/Mar/21 - http://seclists.org/fulldisclosure/2024/Mar/25 - http://seclists.org/fulldisclosure/2024/Mar/24 - http://seclists.org/fulldisclosure/2024/Mar/22 - http://seclists.org/fulldisclosure/2024/Mar/23 - http://seclists.org/
- http://seclists.org/fulldisclosure/2024/Mar/22 - http://seclists.org/fulldisclosure/2024/Mar/23 - http://seclists.org/fulldisclosure/2024/Mar/26
CVE ID: CVE-2024-23287 State: PUBLISHED Published: 2024-03-08T01:35:49.346Z Last Updated: 2025-11-04T18:28:00.566Z Vendors: Apple Products: iOS and iPadOS, macOS, watchOS Problem Types: An app may be able to access user-sensitive data Description: A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Sonoma 14.4, iOS 17.4 and iPadOS 17.4, watchOS 10.4. An app may be able to access user-sensitive data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214081 - https://support.apple.com/en-us/HT214084 - https://support.apple.com/en-us/HT214088 - http://seclists.org/fulldisc
081 - https://support.apple.com/en-us/HT214084 - https://support.apple.com/en-us/HT214088 - http://seclists.org/fulldisclosure/2024/Mar/21 - http://seclists.org/fulldisclosure/2024/Mar/24
CVE ID: CVE-2024-23288 State: PUBLISHED Published: 2024-03-08T01:35:40.080Z Last Updated: 2025-11-04T18:28:06.327Z Vendors: Apple Products: tvOS, iOS and iPadOS, macOS, watchOS Problem Types: An app may be able to elevate privileges Description: This issue was addressed by removing the vulnerable code. This issue is fixed in tvOS 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, watchOS 10.4. An app may be able to elevate privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT214086 - https://support.apple.com/en-us/HT214081 - https://support.apple.com/en-us/HT214084 - https://support.apple.com/en-us/HT214088 -
support.apple.com/en-us/HT214081 - https://support.apple.com/en-us/HT214084 - https://support.apple.com/en-us/HT214088 - http://seclists.org/fulldisclosure/2024/Mar/21 - http://seclists.org/fulldisclosure/2024/Mar/25 - http://seclists.org/fulldisclosure/2024/Mar/24
CVE ID: CVE-2024-23289 State: PUBLISHED Published: 2024-03-08T01:35:36.328Z Last Updated: 2025-11-04T18:28:11.170Z Vendors: Apple Products: iOS and iPadOS, macOS, watchOS Problem Types: A person with physical access to a device may be able to use Siri to access private calendar information Description: A lock screen issue was addressed with improved state management. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, watchOS 10.4. A person with physical access to a device may be able to use Siri to access private calendar information. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.
mation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214081 - https://support.apple.com/en-us/HT214082 - https://support.apple.com/en-us/HT214084 - https://support.apple.com/en-us/HT214088 - http://seclists.org/fulldisclosure/2024/Mar/21 - http://seclists.org/fulldisclosure/2024/Mar/24
CVE ID: CVE-2024-23290 State: PUBLISHED Published: 2024-03-08T01:35:58.743Z Last Updated: 2025-11-04T18:28:16.273Z Vendors: Apple Products: tvOS, iOS and iPadOS, macOS, watchOS Problem Types: An app may be able to access user-sensitive data Description: A logic issue was addressed with improved restrictions. This issue is fixed in tvOS 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, watchOS 10.4. An app may be able to access user-sensitive data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214086 - https://support.apple.com/en-us/HT214081 - https://support.apple.com/en-us/HT214084 - https://support.apple.com/en
086 - https://support.apple.com/en-us/HT214081 - https://support.apple.com/en-us/HT214084 - https://support.apple.com/en-us/HT214088 - http://seclists.org/fulldisclosure/2024/Mar/21 - http://seclists.org/fulldisclosure/2024/Mar/25 - http://seclists.org/fulldisclosure/2024/Mar/24
CVE ID: CVE-2024-23291 State: PUBLISHED Published: 2024-03-08T01:35:50.295Z Last Updated: 2025-11-04T18:28:21.038Z Vendors: Apple Products: tvOS, iOS and iPadOS, macOS, watchOS Problem Types: A malicious app may be able to observe user data in log entries related to accessibility notifications Description: A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in tvOS 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, watchOS 10.4. A malicious app may be able to observe user data in log entries related to accessibility notifications. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple
cations. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT214086 - https://support.apple.com/en-us/HT214081 - https://support.apple.com/en-us/HT214084 - https://support.apple.com/en-us/HT214088 - http://seclists.org/fulldisclosure/2024/Mar/21 - http://seclists.org/fulldisclosure/2024/Mar/25 - http://seclists.org/fulldisclosure/2024/Mar/24
CVE ID: CVE-2024-23292 State: PUBLISHED Published: 2024-03-08T01:35:44.713Z Last Updated: 2025-11-04T18:28:23.439Z Vendors: Apple Products: iOS and iPadOS, macOS Problem Types: An app may be able to access information about a user's contacts Description: This issue was addressed with improved data protection. This issue is fixed in macOS Sonoma 14.4, iOS 17.4 and iPadOS 17.4. An app may be able to access information about a user's contacts. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214081 - https://support.apple.com/en-us/HT214084 - http://seclists.org/fulldisclosure/2024/Mar/21
CVE ID: CVE-2024-23293 State: PUBLISHED Published: 2024-03-08T01:35:30.712Z Last Updated: 2025-11-04T18:28:28.236Z Vendors: Apple Products: tvOS, iOS and iPadOS, macOS, watchOS Problem Types: An attacker with physical access may be able to use Siri to access sensitive user data Description: This issue was addressed through improved state management. This issue is fixed in tvOS 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, watchOS 10.4. An attacker with physical access may be able to use Siri to access sensitive user data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214086 - https://support.apple.com/en-us/HT
nt: - CVE Program Container: References: - https://support.apple.com/en-us/HT214086 - https://support.apple.com/en-us/HT214081 - https://support.apple.com/en-us/HT214084 - https://support.apple.com/en-us/HT214088 - http://seclists.org/fulldisclosure/2024/Mar/21 - http://seclists.org/fulldisclosure/2024/Mar/25 - http://seclists.org/fulldisclosure/2024/Mar/24
CVE ID: CVE-2024-23294 State: PUBLISHED Published: 2024-03-08T01:35:26.964Z Last Updated: 2025-11-04T18:28:29.426Z Vendors: Apple Products: macOS Problem Types: Processing malicious input may lead to code execution Description: This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14.4. Processing malicious input may lead to code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT214084 - http://seclists.org/fulldisclosure/2024/Mar/21
CVE ID: CVE-2024-23295 State: PUBLISHED Published: 2024-03-08T01:35:20.457Z Last Updated: 2025-11-04T18:28:30.598Z Vendors: Apple Products: visionOS Problem Types: An unauthenticated user may be able to use an unprotected Persona Description: A permissions issue was addressed to help ensure Personas are always protected This issue is fixed in visionOS 1.1. An unauthenticated user may be able to use an unprotected Persona. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT214087 - http://seclists.org/fulldisclosure/2024/Mar/26
CVE ID: CVE-2024-23296 State: PUBLISHED Published: 2024-03-05T19:24:13.999Z Last Updated: 2025-11-04T18:28:31.800Z Vendors: Apple Products: iOS and iPadOS Problem Types: An attacker with arbitrary kernel read and write capability may be able to bypass kernel memory protections. Apple is aware of a report that this issue may have been exploited. Description: A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 17.4 and iPadOS 17.4. An attacker with arbitrary kernel read and write capability may be able to bypass kernel memory protections. Apple is aware of a report that this issue may have been exploited. Additional Analyst Notes: - CISA ADP Vulnrichmen
ns. Apple is aware of a report that this issue may have been exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214081 - https://support.apple.com/kb/HT214088 - https://support.apple.com/kb/HT214084 - https://support.apple.com/kb/HT214086 - https://support.apple.com/kb/HT214087 - http://seclists.org/fulldisclosure/2024/Mar/18 - http://seclists.org/fulldisclosure/2024/Mar/21 - http://seclists.org/fulldisclosure/2024/Mar/25 - http://seclists.org/fulldisclosure/2024/Mar/24 - http://seclists.org/fulldisclosure/2024/Mar/26 - https://support.apple.com/kb/HT214107 - http://seclists.org/fulldisclosure/2024/May/11 - h
/fulldisclosure/2024/Mar/26 - https://support.apple.com/kb/HT214107 - http://seclists.org/fulldisclosure/2024/May/11 - http://seclists.org/fulldisclosure/2024/May/13 - https://support.apple.com/kb/HT214100 - https://support.apple.com/kb/HT214118 - http://seclists.org/fulldisclosure/2024/Jul/20
CVE ID: CVE-2024-23297 State: PUBLISHED Published: 2024-03-08T01:36:12.770Z Last Updated: 2025-11-04T18:28:35.345Z Vendors: Apple Products: tvOS, iOS and iPadOS, watchOS Problem Types: A malicious application may be able to access private information Description: The issue was addressed with improved checks. This issue is fixed in tvOS 17.4, iOS 17.4 and iPadOS 17.4, watchOS 10.4. A malicious application may be able to access private information. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214086 - https://support.apple.com/en-us/HT214081 - https://support.apple.com/en-us/HT214088 - http://seclists.org/fulldisclo
6 - https://support.apple.com/en-us/HT214081 - https://support.apple.com/en-us/HT214088 - http://seclists.org/fulldisclosure/2024/Mar/25 - http://seclists.org/fulldisclosure/2024/Mar/24
CVE ID: CVE-2024-23298 State: PUBLISHED Published: 2024-03-15T22:29:38.958Z Last Updated: 2025-11-04T18:28:36.532Z Vendors: Apple Products: Xcode Problem Types: An app may bypass Gatekeeper checks Description: A logic issue was addressed with improved state management. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214092
CVE ID: CVE-2024-23299 State: PUBLISHED Published: 2024-06-10T19:20:57.952Z Last Updated: 2025-11-04T18:28:40.093Z Vendors: Apple Products: macOS Problem Types: An app may be able to break out of its sandbox Description: The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.4, macOS Ventura 13.6.5, macOS Monterey 12.7.4. An app may be able to break out of its sandbox. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT214083 - https://support.apple.com/en-us/HT214085 - https://support.apple.com/en-us/HT214084
CVE ID: CVE-2024-23300 State: PUBLISHED Published: 2024-03-12T20:33:32.246Z Last Updated: 2025-11-04T18:28:41.623Z Vendors: Apple Products: GarageBand Problem Types: Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution Description: A use-after-free issue was addressed with improved memory management. This issue is fixed in GarageBand 10.4.11. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT214090 - http://seclists.org/fulldisclosure/2024/Mar/27