Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-54457 State: PUBLISHED Published: 2024-12-18T06:37:11.912Z Last Updated: 2024-12-18T15:28:14.673Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: FXC Inc. Products: AE1021, AE1021PE Problem Types: CWE-1242 Description: Inclusion of undocumented features or chicken bits issue exists in AE1021 firmware versions 2.0.10 and earlier and AE1021PE firmware versions 2.0.10 and earlier, which may allow a logged-in user to enable telnet service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.fxc.jp/news/20241213 - https://jvn.jp/en/vu/JVNVU91084137/
CVE ID: CVE-2024-54458 State: PUBLISHED Published: 2025-02-27T02:18:08.616Z Last Updated: 2025-11-03T19:32:07.681Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: bsg: Set bsg_queue to NULL after removal Currently, this does not cause any issues, but I believe it is necessary to set bsg_queue to NULL after removing it to prevent potential use-after-free (UAF) access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/bb4783c670180b922267222408e1c48d22dfbb46 - https://git.kernel.org/stable/c/22018622e1e9e371198dbd983af946a844d5924c - https://git.ker
b922267222408e1c48d22dfbb46 - https://git.kernel.org/stable/c/22018622e1e9e371198dbd983af946a844d5924c - https://git.kernel.org/stable/c/5e7b6e44468c3242c21c2a8656d009fb3eb50a73 - https://git.kernel.org/stable/c/5f782d4741bf558def60df192b858b0efc6a5f0a - https://git.kernel.org/stable/c/88a01e9c9ad40c075756ba93b47984461d4ff15d - https://git.kernel.org/stable/c/9193bdc170cc23fe98aca71d1a63c0bf6e1e853b - https://git.kernel.org/stable/c/1e95c798d8a7f70965f0f88d4657b682ff0ec75f
CVE ID: CVE-2024-54460 State: PUBLISHED Published: 2025-01-11T12:29:53.553Z Last Updated: 2025-10-01T19:57:21.713Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: iso: Fix circular lock in iso_listen_bis This fixes the circular locking dependency warning below, by releasing the socket lock before enterning iso_listen_bis, to avoid any potential deadlock with hdev lock. [ 75.307983] ====================================================== [ 75.307984] WARNING: possible circular locking dependency detected [ 75.307985] 6.12.0-rc6+ #22 Not tainted [ 75.307987] ------------------------------------------------------ [ 75.307
ed [ 75.307985] 6.12.0-rc6+ #22 Not tainted [ 75.307987] ------------------------------------------------------ [ 75.307987] kworker/u81:2/2623 is trying to acquire lock: [ 75.307988] ffff8fde1769da58 (sk_lock-AF_BLUETOOTH-BTPROTO_ISO) at: iso_connect_cfm+0x253/0x840 [bluetooth] [ 75.308021] but task is already holding lock: [ 75.308022] ffff8fdd61a10078 (&hdev->lock) at: hci_le_per_adv_report_evt+0x47/0x2f0 [bluetooth] [ 75.308053] which lock already depends on the new lock. [ 75.308054] the existing dependency chain (in reverse order) is: [ 75.308055] -> #1 (&hdev->lock){+.+.}-{3:3}: [ 75.308057] __mutex_lock+0xad/0xc50 [ 75.308061] mutex_lock_nested+0x1b/0x30 [ 75.308063] iso_sock_listen+
+.+.}-{3:3}: [ 75.308057] __mutex_lock+0xad/0xc50 [ 75.308061] mutex_lock_nested+0x1b/0x30 [ 75.308063] iso_sock_listen+0x143/0x5c0 [bluetooth] [ 75.308085] __sys_listen_socket+0x49/0x60 [ 75.308088] __x64_sys_listen+0x4c/0x90 [ 75.308090] x64_sys_call+0x2517/0x25f0 [ 75.308092] do_syscall_64+0x87/0x150 [ 75.308095] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 75.308098] -> #0 (sk_lock-AF_BLUETOOTH-BTPROTO_ISO){+.+.}-{0:0}: [ 75.308100] __lock_acquire+0x155e/0x25f0 [ 75.308103] lock_acquire+0xc9/0x300 [ 75.308105] lock_sock_nested+0x32/0x90 [ 75.308107] iso_connect_cfm+0x253/0x840 [bluetooth] [ 75.308128] hci_connect_cfm+0x6c/0x190 [bluetooth] [ 75.308155] hci_le_per_adv_report_evt+0x27b/0x2f0
0x840 [bluetooth] [ 75.308128] hci_connect_cfm+0x6c/0x190 [bluetooth] [ 75.308155] hci_le_per_adv_report_evt+0x27b/0x2f0 [bluetooth] [ 75.308180] hci_le_meta_evt+0xe7/0x200 [bluetooth] [ 75.308206] hci_event_packet+0x21f/0x5c0 [bluetooth] [ 75.308230] hci_rx_work+0x3ae/0xb10 [bluetooth] [ 75.308254] process_one_work+0x212/0x740 [ 75.308256] worker_thread+0x1bd/0x3a0 [ 75.308258] kthread+0xe4/0x120 [ 75.308259] ret_from_fork+0x44/0x70 [ 75.308261] ret_from_fork_asm+0x1a/0x30 [ 75.308263] other info that might help us debug this: [ 75.308264] Possible unsafe locking scenario: [ 75.308264] CPU0 CPU1 [ 75.308265] ---- ---- [ 75.308265] lock(&hdev->lock); [ 75.308267] lock(sk_lock- AF_BLUETOOTH-B
[ 75.308264] CPU0 CPU1 [ 75.308265] ---- ---- [ 75.308265] lock(&hdev->lock); [ 75.308267] lock(sk_lock- AF_BLUETOOTH-BTPROTO_ISO); [ 75.308268] lock(&hdev->lock); [ 75.308269] lock(sk_lock-AF_BLUETOOTH-BTPROTO_ISO); [ 75.308270] *** DEADLOCK *** [ 75.308271] 4 locks held by kworker/u81:2/2623: [ 75.308272] #0: ffff8fdd66e52148 ((wq_completion)hci0#2){+.+.}-{0:0}, at: process_one_work+0x443/0x740 [ 75.308276] #1: ffffafb488b7fe48 ((work_completion)(&hdev->rx_work)), at: process_one_work+0x1ce/0x740 [ 75.308280] #2: ffff8fdd61a10078 (&hdev->lock){+.+.}-{3:3} at: hci_le_per_adv_report_evt+0x47/0x2f0 [bluetooth] [ 75.308304] #3: ffffffffb6ba4900 (rcu_read_lock){....}-{1:2}, at: hci_connect_cfm
adv_report_evt+0x47/0x2f0 [bluetooth] [ 75.308304] #3: ffffffffb6ba4900 (rcu_read_lock){....}-{1:2}, at: hci_connect_cfm+0x29/0x190 [bluetooth] Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/c541d7b5e17987ed330798b07d4ad508859c1c93 - https://git.kernel.org/stable/c/168e28305b871d8ec604a8f51f35467b8d7ba05b
CVE ID: CVE-2024-54461 State: PUBLISHED Published: 2025-01-29T11:51:04.255Z Last Updated: 2025-02-12T19:51:14.271Z Vendors: Flutter Products: file_selector_android Problem Types: CWE-23 Description: The file names constructed within file_selector are missing sanitization checks leaving them vulnerable to malicious document providers. This may result in cases where a user with a malicious document provider installed can select a document file from that provider while using your app and could potentially override internal files in your app cache. Issue patched in 0.5.1+12. It is recommended to update to the latest version of file_selector_android that contains the changes to address this vulne
is recommended to update to the latest version of file_selector_android that contains the changes to address this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/flutter/packages/security/advisories/GHSA-r465-vhm9-7r5h
CVE ID: CVE-2024-54462 State: PUBLISHED Published: 2025-01-29T11:52:05.386Z Last Updated: 2025-02-12T19:51:14.154Z Vendors: Flutter Products: image_picker_android Problem Types: CWE-23 Description: The file names constructed within image_picker are missing sanitization checks leaving them vulnerable to malicious document providers. This may result in cases where a user with a malicious document provider installed can select an image file from that provider while using your app and could potentially override internal files in your app cache. Issue patched in 0.8.12+18. It is recommended to update to the latest version of image_picker_android that contains the changes to address this vulnerabi
recommended to update to the latest version of image_picker_android that contains the changes to address this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/flutter/packages/security/advisories/GHSA-98v2-f47x-89xw
CVE ID: CVE-2024-54463 State: PUBLISHED Published: 2025-03-10T19:11:10.755Z Last Updated: 2025-03-11T02:47:09.447Z Vendors: Apple Products: macOS Problem Types: An app may be able to access removable volumes without user consent Description: This issue was addressed with improved entitlements. This issue is fixed in macOS Sequoia 15. An app may be able to access removable volumes without user consent. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/121238
CVE ID: CVE-2024-54465 State: PUBLISHED Published: 2024-12-11T22:56:56.616Z Last Updated: 2025-11-03T22:29:46.666Z Vendors: Apple Products: macOS Problem Types: An app may be able to elevate privileges Description: A logic issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.2. An app may be able to elevate privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/121839
CVE ID: CVE-2024-54466 State: PUBLISHED Published: 2024-12-11T22:59:20.129Z Last Updated: 2025-11-03T22:29:51.038Z Vendors: Apple Products: macOS Problem Types: An encrypted volume may be accessed by a different user without prompting for the password Description: An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.2, macOS Ventura 13.7.2, macOS Sonoma 14.7.2. An encrypted volume may be accessed by a different user without prompting for the password. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/121839 - https://support.apple.com/en-us/121842 - https://support.
tainer: References: - https://support.apple.com/en-us/121839 - https://support.apple.com/en-us/121842 - https://support.apple.com/en-us/121840
CVE ID: CVE-2024-54467 State: PUBLISHED Published: 2025-03-10T19:11:13.993Z Last Updated: 2025-11-03T19:32:09.083Z Vendors: Apple Products: macOS, tvOS, visionOS, iOS and iPadOS, watchOS, Safari Problem Types: A malicious website may exfiltrate data cross-origin Description: A cookie management issue was addressed with improved state management. This issue is fixed in watchOS 11, macOS Sequoia 15, Safari 18, visionOS 2, iOS 18 and iPadOS 18, tvOS 18. A malicious website may exfiltrate data cross-origin. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/121238 - https://support.apple.com/en-us/121248 - https://support.app
ner: References: - https://support.apple.com/en-us/121238 - https://support.apple.com/en-us/121248 - https://support.apple.com/en-us/121249 - https://support.apple.com/en-us/121250 - https://support.apple.com/en-us/121240 - https://support.apple.com/en-us/121241
CVE ID: CVE-2024-54468 State: PUBLISHED Published: 2025-01-27T21:45:38.806Z Last Updated: 2025-03-14T16:03:18.268Z Vendors: Apple Products: tvOS, macOS, watchOS, iPadOS, iOS and iPadOS Problem Types: An app may be able to break out of its sandbox Description: The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.2, tvOS 18.2, watchOS 11.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sonoma 14.7.2, macOS Sequoia 15.2. An app may be able to break out of its sandbox. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/121844 - https://support.apple.com/en-us/121839 - https://support.apple.com/en-us/121842 - https:
upport.apple.com/en-us/121844 - https://support.apple.com/en-us/121839 - https://support.apple.com/en-us/121842 - https://support.apple.com/en-us/121843 - https://support.apple.com/en-us/121838 - https://support.apple.com/en-us/121837 - https://support.apple.com/en-us/121840
CVE ID: CVE-2024-54469 State: PUBLISHED Published: 2025-03-10T19:11:08.410Z Last Updated: 2025-03-11T13:37:43.152Z Vendors: Apple Products: macOS, visionOS, iOS and iPadOS Problem Types: A local user may be able to leak sensitive user information Description: The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7, macOS Sequoia 15, macOS Sonoma 14.7, visionOS 2, iOS 18 and iPadOS 18. A local user may be able to leak sensitive user information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/121234 - https://support.apple.com/en-us/121238 - https://support.apple.com/en-us/121249 - https://support.apple.com/en-us
1234 - https://support.apple.com/en-us/121238 - https://support.apple.com/en-us/121249 - https://support.apple.com/en-us/121250 - https://support.apple.com/en-us/121247
CVE ID: CVE-2024-54470 State: PUBLISHED Published: 2025-01-15T19:36:00.992Z Last Updated: 2025-01-16T16:16:24.618Z Vendors: Apple Products: iOS and iPadOS Problem Types: An attacker with physical access may be able to access contacts from the lock screen Description: A logic issue was addressed with improved checks. This issue is fixed in iOS 18.1 and iPadOS 18.1, iOS 17.7.1 and iPadOS 17.7.1. An attacker with physical access may be able to access contacts from the lock screen. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/121567 - https://support.apple.com/en-us/121563
CVE ID: CVE-2024-54471 State: PUBLISHED Published: 2024-12-11T22:58:43.395Z Last Updated: 2025-03-20T21:44:13.840Z Vendors: Apple Products: macOS Problem Types: A malicious application may be able to leak a user's credentials Description: This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sonoma 14.7.1, macOS Ventura 13.7.1. A malicious application may be able to leak a user's credentials. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/121570 - https://support.apple.com/en-us/121568
CVE ID: CVE-2024-54473 State: PUBLISHED Published: 2025-03-10T19:08:53.876Z Last Updated: 2025-03-11T13:39:26.618Z Vendors: Apple Products: macOS Problem Types: An app may be able to access user-sensitive data Description: This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15. An app may be able to access user-sensitive data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/121238
CVE ID: CVE-2024-54474 State: PUBLISHED Published: 2024-12-11T22:58:00.449Z Last Updated: 2025-11-03T22:29:55.415Z Vendors: Apple Products: macOS Problem Types: An app may be able to access user-sensitive data Description: The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2, macOS Ventura 13.7.2, macOS Sonoma 14.7.2. An app may be able to access user-sensitive data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/121839 - https://support.apple.com/en-us/121842 - https://support.apple.com/en-us/121840
CVE ID: CVE-2024-54475 State: PUBLISHED Published: 2025-01-27T21:45:49.864Z Last Updated: 2025-03-13T14:04:17.822Z Vendors: Apple Products: macOS Problem Types: An app may be able to determine a user’s current location Description: A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma 14.7.2, macOS Sequoia 15.2, macOS Ventura 13.7.2. An app may be able to determine a user’s current location. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/121839 - https://support.apple.com/en-us/121842 - https://support.apple.com/en-us/121840
CVE ID: CVE-2024-54476 State: PUBLISHED Published: 2024-12-11T22:58:21.651Z Last Updated: 2025-11-03T22:29:59.812Z Vendors: Apple Products: macOS Problem Types: An app may be able to access user-sensitive data Description: The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2, macOS Ventura 13.7.2, macOS Sonoma 14.7.2. An app may be able to access user-sensitive data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/121839 - https://support.apple.com/en-us/121842 - https://support.apple.com/en-us/121840
CVE ID: CVE-2024-54477 State: PUBLISHED Published: 2024-12-11T22:58:17.804Z Last Updated: 2025-11-03T22:30:06.242Z Vendors: Apple Products: macOS Problem Types: An app may be able to access user-sensitive data Description: The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2, macOS Ventura 13.7.2, macOS Sonoma 14.7.2. An app may be able to access user-sensitive data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/121839 - https://support.apple.com/en-us/121842 - https://support.apple.com/en-us/121840
CVE ID: CVE-2024-54478 State: PUBLISHED Published: 2025-01-27T21:46:03.997Z Last Updated: 2025-11-03T20:48:32.507Z Vendors: Apple Products: tvOS, visionOS, macOS, watchOS, iOS and iPadOS, iPadOS Problem Types: Processing maliciously crafted web content may lead to an unexpected process crash Description: An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iPadOS 17.7.4, visionOS 2.2, tvOS 18.2, watchOS 11.2, iOS 18.2 and iPadOS 18.2, macOS Sonoma 14.7.2, macOS Sequoia 15.2. Processing maliciously crafted web content may lead to an unexpected process crash. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - h
an unexpected process crash. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/121844 - https://support.apple.com/en-us/121845 - https://support.apple.com/en-us/121839 - https://support.apple.com/en-us/121843 - https://support.apple.com/en-us/121837 - https://support.apple.com/en-us/121840 - https://support.apple.com/en-us/122067
CVE ID: CVE-2024-54479 State: PUBLISHED Published: 2024-12-11T22:57:33.957Z Last Updated: 2025-11-03T22:30:13.849Z Vendors: Apple Products: tvOS, visionOS, macOS, watchOS, iPadOS, iOS and iPadOS, Safari Problem Types: Processing maliciously crafted web content may lead to an unexpected process crash Description: The issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.3, watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, Safari 18.2, iOS 18.2 and iPadOS 18.2. Processing maliciously crafted web content may lead to an unexpected process crash. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-u
Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/121844 - https://support.apple.com/en-us/121845 - https://support.apple.com/en-us/121839 - https://support.apple.com/en-us/121843 - https://support.apple.com/en-us/121838 - https://support.apple.com/en-us/121837 - https://support.apple.com/en-us/121846
CVE ID: CVE-2024-54484 State: PUBLISHED Published: 2024-12-11T22:59:05.600Z Last Updated: 2025-11-03T22:30:15.335Z Vendors: Apple Products: macOS Problem Types: An app may be able to access user-sensitive data Description: The issue was resolved by sanitizing logging. This issue is fixed in macOS Sequoia 15.2. An app may be able to access user-sensitive data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/121839
CVE ID: CVE-2024-54485 State: PUBLISHED Published: 2024-12-11T22:59:06.259Z Last Updated: 2025-11-03T22:30:16.825Z Vendors: Apple Products: iPadOS, iOS and iPadOS Problem Types: An attacker with physical access to an iOS device may be able to view notification content from the lock screen Description: The issue was addressed by adding additional logic. This issue is fixed in iPadOS 17.7.3, iOS 18.2 and iPadOS 18.2. An attacker with physical access to an iOS device may be able to view notification content from the lock screen. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/121838 - https://support.apple.com/en-us/12183
t: - CVE Program Container: References: - https://support.apple.com/en-us/121838 - https://support.apple.com/en-us/121837
CVE ID: CVE-2024-54486 State: PUBLISHED Published: 2024-12-11T22:56:57.968Z Last Updated: 2025-11-03T22:30:24.219Z Vendors: Apple Products: tvOS, visionOS, macOS, watchOS, iPadOS, iOS and iPadOS Problem Types: Processing a maliciously crafted font may result in the disclosure of process memory Description: The issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.3, watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, iOS 18.2 and iPadOS 18.2, macOS Ventura 13.7.2, macOS Sonoma 14.7.2. Processing a maliciously crafted font may result in the disclosure of process memory. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http
losure of process memory. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/121844 - https://support.apple.com/en-us/121845 - https://support.apple.com/en-us/121839 - https://support.apple.com/en-us/121842 - https://support.apple.com/en-us/121843 - https://support.apple.com/en-us/121838 - https://support.apple.com/en-us/121837 - https://support.apple.com/en-us/121840
CVE ID: CVE-2024-54488 State: PUBLISHED Published: 2025-01-27T21:46:28.908Z Last Updated: 2025-02-05T15:23:13.516Z Vendors: Apple Products: macOS, iPadOS, iOS and iPadOS Problem Types: Photos in the Hidden Photos Album may be viewed without authentication Description: A logic issue was addressed with improved file handling. This issue is fixed in macOS Ventura 13.7.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sonoma 14.7.2, macOS Sequoia 15.2. Photos in the Hidden Photos Album may be viewed without authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/121839 - https://support.apple.com/en-us/121842 - https://support.apple.com/en
rences: - https://support.apple.com/en-us/121839 - https://support.apple.com/en-us/121842 - https://support.apple.com/en-us/121838 - https://support.apple.com/en-us/121837 - https://support.apple.com/en-us/121840
CVE ID: CVE-2024-54489 State: PUBLISHED Published: 2024-12-11T22:59:19.485Z Last Updated: 2025-11-03T22:30:28.609Z Vendors: Apple Products: macOS Problem Types: Running a mount command may unexpectedly execute arbitrary code Description: A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.2, macOS Ventura 13.7.2, macOS Sonoma 14.7.2. Running a mount command may unexpectedly execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/121839 - https://support.apple.com/en-us/121842 - https://support.apple.com/en-us/121840
CVE ID: CVE-2024-54490 State: PUBLISHED Published: 2024-12-11T22:56:58.627Z Last Updated: 2025-11-03T22:30:31.558Z Vendors: Apple Products: macOS Problem Types: A local attacker may gain access to user's Keychain items Description: This issue was addressed by enabling hardened runtime. This issue is fixed in macOS Sequoia 15.2. A local attacker may gain access to user's Keychain items. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/121839
CVE ID: CVE-2024-54491 State: PUBLISHED Published: 2024-12-11T22:57:26.436Z Last Updated: 2025-11-03T22:30:33.179Z Vendors: Apple Products: macOS Problem Types: A malicious application may be able to determine a user's current location Description: The issue was resolved by sanitizing logging This issue is fixed in macOS Sequoia 15.2. A malicious application may be able to determine a user's current location. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/121839
CVE ID: CVE-2024-54492 State: PUBLISHED Published: 2024-12-11T22:59:01.815Z Last Updated: 2025-11-03T22:30:37.640Z Vendors: Apple Products: visionOS, macOS, iPadOS, iOS and iPadOS Problem Types: An attacker in a privileged network position may be able to alter network traffic Description: This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in macOS Sequoia 15.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, visionOS 2.2. An attacker in a privileged network position may be able to alter network traffic. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/121845 - https://support