Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-40754 State: PUBLISHED Published: 2024-09-10T10:48:51.493Z Last Updated: 2024-09-18T22:42:55.403Z Vendors: Samsung Open Source Products: Escargot Problem Types: CWE-122 Description: Heap-based Buffer Overflow vulnerability in Samsung Open Source Escargot JavaScript engine allows Overflow Buffers.This issue affects Escargot: 4.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Samsung/escargot/pull/1369
CVE ID: CVE-2024-40761 State: PUBLISHED Published: 2024-09-25T07:31:08.416Z Last Updated: 2024-09-27T19:02:34.376Z Vendors: Apache Software Foundation Products: Apache Answer Problem Types: CWE-326 Description: Inadequate Encryption Strength vulnerability in Apache Answer. This issue affects Apache Answer: through 1.3.5. Using the MD5 value of a user's email to access Gravatar is insecure and can lead to the leakage of user email. The official recommendation is to use SHA256 instead. Users are recommended to upgrade to version 1.4.0, which fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lists.apache.org/thread/mmrhsfy16qwrw0p
t Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lists.apache.org/thread/mmrhsfy16qwrw0pkv0p9kj40vy3sg08x
CVE ID: CVE-2024-40762 State: PUBLISHED Published: 2025-01-09T06:43:25.000Z Last Updated: 2025-01-09T15:08:11.330Z Vendors: SonicWall Products: SonicOS Problem Types: CWE-338 Description: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in the SonicOS SSLVPN authentication token generator that, in certain cases, can be predicted by an attacker potentially resulting in authentication bypass. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0003
CVE ID: CVE-2024-40763 State: PUBLISHED Published: 2024-12-05T13:39:19.644Z Last Updated: 2024-12-07T04:55:28.515Z Vendors: SonicWall Products: SMA100 Problem Types: CWE-122 Description: Heap-based buffer overflow vulnerability in the SonicWall SMA100 SSLVPN due to the use of strcpy. This allows remote authenticated attackers to cause Heap-based buffer overflow and potentially lead to code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0018
CVE ID: CVE-2024-40764 State: PUBLISHED Published: 2024-07-18T07:42:37.995Z Last Updated: 2024-08-02T04:39:54.567Z Vendors: SonicWall Products: SonicOS Problem Types: CWE-122 Description: Heap-based buffer overflow vulnerability in the SonicOS IPSec VPN allows an unauthenticated remote attacker to cause Denial of Service (DoS). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0012
CVE ID: CVE-2024-40765 State: PUBLISHED Published: 2025-01-09T07:12:40.644Z Last Updated: 2025-01-09T14:58:28.792Z Vendors: SonicWall Products: SonicOS Problem Types: CWE-190 Description: An Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker in specific conditions to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a specially crafted IKEv2 payload. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0013
CVE ID: CVE-2024-40766 State: PUBLISHED Published: 2024-08-23T06:19:07.229Z Last Updated: 2025-10-21T22:55:46.444Z Vendors: SonicWall Products: SonicOS Problem Types: CWE-284 Description: An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects SonicWall Firewall Gen 5 and Gen 6 devices, as well as Gen 7 devices running SonicOS 7.0.1-5035 and older versions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0015
CVE ID: CVE-2024-40767 State: PUBLISHED Published: 2024-07-24T00:00:00.000Z Last Updated: 2025-11-04T16:12:31.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: In OpenStack Nova before 27.4.1, 28 before 28.2.1, and 29 before 29.1.1, by supplying a raw format image that is actually a crafted QCOW2 image with a backing file path or VMDK flat image with a descriptor file path, an authenticated user may convince systems to return a copy of the referenced file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Nova deployments are affected. NOTE: this issue exists because of an incomplete fix for CVE-2022-47951 and CVE-2024-32498. Additio
yments are affected. NOTE: this issue exists because of an incomplete fix for CVE-2022-47951 and CVE-2024-32498. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://launchpad.net/bugs/2071734 - https://security.openstack.org - https://www.openwall.com/lists/oss-security/2024/07/23/2 - https://security.openstack.org/ossa/OSSA-2024-002.html
CVE ID: CVE-2024-40770 State: PUBLISHED Published: 2024-09-16T23:22:57.231Z Last Updated: 2025-11-04T16:12:32.860Z Vendors: Apple Products: macOS Problem Types: A non-privileged user may be able to modify restricted network settings Description: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. A non-privileged user may be able to modify restricted network settings. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/121238
CVE ID: CVE-2024-40771 State: PUBLISHED Published: 2025-01-15T19:35:58.395Z Last Updated: 2025-01-16T17:02:08.639Z Vendors: Apple Products: macOS, tvOS, visionOS, iOS and iPadOS, watchOS Problem Types: An app may be able to execute arbitrary code with kernel privileges Description: The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, watchOS 10.5, tvOS 17.5, macOS Ventura 13.6.7, visionOS 1.2. An app may be able to execute arbitrary code with kernel privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/120900 - https
vileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/120900 - https://support.apple.com/en-us/120901 - https://support.apple.com/en-us/120906 - https://support.apple.com/en-us/120898 - https://support.apple.com/en-us/120905 - https://support.apple.com/en-us/120899 - https://support.apple.com/en-us/120902 - https://support.apple.com/en-us/120903
CVE ID: CVE-2024-40774 State: PUBLISHED Published: 2024-07-29T22:16:29.315Z Last Updated: 2025-11-04T17:22:15.424Z Vendors: Apple Products: iOS and iPadOS, macOS, watchOS, tvOS Problem Types: An app may be able to bypass Privacy preferences Description: A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Ventura 13.6.8, macOS Monterey 12.7.6, iOS 17.6 and iPadOS 17.6, watchOS 10.6, tvOS 17.6, macOS Sonoma 14.6. An app may be able to bypass Privacy preferences. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214117 - https://support.apple.com/en-us/HT214120 - https:/
m Container: References: - https://support.apple.com/en-us/HT214117 - https://support.apple.com/en-us/HT214120 - https://support.apple.com/en-us/HT214124 - https://support.apple.com/en-us/HT214119 - https://support.apple.com/en-us/HT214122 - https://support.apple.com/en-us/HT214118 - http://seclists.org/fulldisclosure/2024/Jul/16 - http://seclists.org/fulldisclosure/2024/Jul/21 - http://seclists.org/fulldisclosure/2024/Jul/20 - http://seclists.org/fulldisclosure/2024/Jul/22 - http://seclists.org/fulldisclosure/2024/Jul/18 - http://seclists.org/fulldisclosure/2024/Jul/19
CVE ID: CVE-2024-40775 State: PUBLISHED Published: 2024-07-29T22:16:39.517Z Last Updated: 2025-11-04T17:22:19.644Z Vendors: Apple Products: macOS Problem Types: An app may be able to leak sensitive user information Description: A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sonoma 14.6, macOS Monterey 12.7.6, macOS Ventura 13.6.8. An app may be able to leak sensitive user information. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214120 - https://support.apple.com/en-us/HT214119 - https://support.apple.com/en-us/HT214118 - http://seclists.org/fulldisclosure/2
tps://support.apple.com/en-us/HT214119 - https://support.apple.com/en-us/HT214118 - http://seclists.org/fulldisclosure/2024/Jul/20 - http://seclists.org/fulldisclosure/2024/Jul/18 - http://seclists.org/fulldisclosure/2024/Jul/19
CVE ID: CVE-2024-40776 State: PUBLISHED Published: 2024-07-29T22:17:08.706Z Last Updated: 2025-11-04T17:22:27.858Z Vendors: Apple Products: Safari, iOS and iPadOS, watchOS, macOS, visionOS, tvOS Problem Types: Processing maliciously crafted web content may lead to an unexpected process crash Description: A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, Safari 17.6, iOS 17.6 and iPadOS 17.6, watchOS 10.6, tvOS 17.6, visionOS 1.3, macOS Sonoma 14.6. Processing maliciously crafted web content may lead to an unexpected process crash. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: -
an unexpected process crash. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214121 - https://support.apple.com/en-us/HT214117 - https://support.apple.com/en-us/HT214116 - https://support.apple.com/en-us/HT214124 - https://support.apple.com/en-us/HT214119 - https://support.apple.com/en-us/HT214123 - https://support.apple.com/en-us/HT214122 - http://seclists.org/fulldisclosure/2024/Jul/16 - http://seclists.org/fulldisclosure/2024/Jul/15 - http://seclists.org/fulldisclosure/2024/Jul/23 - http://seclists.org/fulldisclosure/2024/Jul/21 - http://seclists.org/fulldisclosure/2024/Jul/17 - http://seclists.org/fulldisclosure
sts.org/fulldisclosure/2024/Jul/21 - http://seclists.org/fulldisclosure/2024/Jul/17 - http://seclists.org/fulldisclosure/2024/Jul/22 - http://seclists.org/fulldisclosure/2024/Jul/18 - https://www.secpod.com/blog/apple-fixes-multiple-security-vulnerabilities-in-july-2024-updates/
CVE ID: CVE-2024-40777 State: PUBLISHED Published: 2024-07-29T22:17:26.092Z Last Updated: 2025-11-04T17:22:34.695Z Vendors: Apple Products: iOS and iPadOS, watchOS, macOS, visionOS, tvOS Problem Types: Processing a maliciously crafted file may lead to unexpected app termination Description: An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 17.6 and iPadOS 17.6, watchOS 10.6, tvOS 17.6, visionOS 1.3, macOS Sonoma 14.6. Processing a maliciously crafted file may lead to unexpected app termination. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214117 - https://support
CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214117 - https://support.apple.com/en-us/HT214124 - https://support.apple.com/en-us/HT214119 - https://support.apple.com/en-us/HT214123 - https://support.apple.com/en-us/HT214122 - http://seclists.org/fulldisclosure/2024/Jul/16 - http://seclists.org/fulldisclosure/2024/Jul/23 - http://seclists.org/fulldisclosure/2024/Jul/21 - http://seclists.org/fulldisclosure/2024/Jul/22 - http://seclists.org/fulldisclosure/2024/Jul/18
CVE ID: CVE-2024-40778 State: PUBLISHED Published: 2024-07-29T22:16:32.808Z Last Updated: 2025-11-04T17:22:38.873Z Vendors: Apple Products: iOS and iPadOS, macOS Problem Types: Photos in the Hidden Photos Album may be viewed without authentication Description: An authentication issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14.6, iOS 17.6 and iPadOS 17.6, iOS 16.7.9 and iPadOS 16.7.9. Photos in the Hidden Photos Album may be viewed without authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214117 - https://support.apple.com/en-us/HT214116 - https://support.apple.c
erences: - https://support.apple.com/en-us/HT214117 - https://support.apple.com/en-us/HT214116 - https://support.apple.com/en-us/HT214119 - http://seclists.org/fulldisclosure/2024/Jul/16 - http://seclists.org/fulldisclosure/2024/Jul/17 - http://seclists.org/fulldisclosure/2024/Jul/18
CVE ID: CVE-2024-40779 State: PUBLISHED Published: 2024-07-29T22:16:33.641Z Last Updated: 2025-11-04T17:22:47.026Z Vendors: Apple Products: Safari, iOS and iPadOS, watchOS, macOS, visionOS, tvOS Problem Types: Processing maliciously crafted web content may lead to an unexpected process crash Description: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, Safari 17.6, iOS 17.6 and iPadOS 17.6, watchOS 10.6, tvOS 17.6, visionOS 1.3, macOS Sonoma 14.6. Processing maliciously crafted web content may lead to an unexpected process crash. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - htt
unexpected process crash. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214121 - https://support.apple.com/en-us/HT214117 - https://support.apple.com/en-us/HT214116 - https://support.apple.com/en-us/HT214124 - https://support.apple.com/en-us/HT214119 - https://support.apple.com/en-us/HT214123 - https://support.apple.com/en-us/HT214122 - http://seclists.org/fulldisclosure/2024/Jul/16 - http://seclists.org/fulldisclosure/2024/Jul/15 - http://seclists.org/fulldisclosure/2024/Jul/23 - http://seclists.org/fulldisclosure/2024/Jul/21 - http://seclists.org/fulldisclosure/2024/Jul/17 - http://seclists.org/fulldisclosure/20
.org/fulldisclosure/2024/Jul/21 - http://seclists.org/fulldisclosure/2024/Jul/17 - http://seclists.org/fulldisclosure/2024/Jul/22 - http://seclists.org/fulldisclosure/2024/Jul/18 - https://www.secpod.com/blog/apple-fixes-multiple-security-vulnerabilities-in-july-2024-updates/
CVE ID: CVE-2024-40780 State: PUBLISHED Published: 2024-07-29T22:16:37.836Z Last Updated: 2025-11-04T17:22:55.216Z Vendors: Apple Products: Safari, iOS and iPadOS, watchOS, macOS, visionOS, tvOS Problem Types: Processing maliciously crafted web content may lead to an unexpected process crash Description: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, Safari 17.6, iOS 17.6 and iPadOS 17.6, watchOS 10.6, tvOS 17.6, visionOS 1.3, macOS Sonoma 14.6. Processing maliciously crafted web content may lead to an unexpected process crash. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - htt
CVE ID: CVE-2024-40781 State: PUBLISHED Published: 2024-07-29T22:16:30.167Z Last Updated: 2025-11-04T17:22:59.295Z Vendors: Apple Products: macOS Problem Types: A local attacker may be able to elevate their privileges Description: The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.6, macOS Monterey 12.7.6, macOS Ventura 13.6.8. A local attacker may be able to elevate their privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214120 - https://support.apple.com/en-us/HT214119 - https://support.apple.com/en-us/HT214118 - http://seclists.org/fulldisclosure/2024/Jul/20 - http://sec
/en-us/HT214119 - https://support.apple.com/en-us/HT214118 - http://seclists.org/fulldisclosure/2024/Jul/20 - http://seclists.org/fulldisclosure/2024/Jul/18 - http://seclists.org/fulldisclosure/2024/Jul/19
CVE ID: CVE-2024-40782 State: PUBLISHED Published: 2024-07-29T22:17:16.599Z Last Updated: 2025-11-04T17:23:07.724Z Vendors: Apple Products: Safari, iOS and iPadOS, watchOS, macOS, visionOS, tvOS Problem Types: Processing maliciously crafted web content may lead to an unexpected process crash Description: A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, Safari 17.6, iOS 17.6 and iPadOS 17.6, watchOS 10.6, tvOS 17.6, visionOS 1.3, macOS Sonoma 14.6. Processing maliciously crafted web content may lead to an unexpected process crash. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: -
sts.org/fulldisclosure/2024/Jul/21 - http://seclists.org/fulldisclosure/2024/Jul/17 - http://seclists.org/fulldisclosure/2024/Jul/22 - http://seclists.org/fulldisclosure/2024/Jul/18
CVE ID: CVE-2024-40783 State: PUBLISHED Published: 2024-07-29T22:17:13.993Z Last Updated: 2025-11-04T17:23:11.810Z Vendors: Apple Products: macOS Problem Types: A malicious application may be able to bypass Privacy preferences Description: The issue was addressed with improved restriction of data container access. This issue is fixed in macOS Sonoma 14.6, macOS Monterey 12.7.6, macOS Ventura 13.6.8. A malicious application may be able to bypass Privacy preferences. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214120 - https://support.apple.com/en-us/HT214119 - https://support.apple.com/en-us/HT214118 - http://secl
e.com/en-us/HT214120 - https://support.apple.com/en-us/HT214119 - https://support.apple.com/en-us/HT214118 - http://seclists.org/fulldisclosure/2024/Jul/20 - http://seclists.org/fulldisclosure/2024/Jul/18 - http://seclists.org/fulldisclosure/2024/Jul/19
CVE ID: CVE-2024-40784 State: PUBLISHED Published: 2024-07-29T22:17:04.342Z Last Updated: 2025-11-04T17:23:21.449Z Vendors: Apple Products: iOS and iPadOS, macOS, watchOS, visionOS, tvOS Problem Types: Processing a maliciously crafted file may lead to unexpected app termination Description: An integer overflow was addressed with improved input validation. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, macOS Ventura 13.6.8, iOS 17.6 and iPadOS 17.6, watchOS 10.6, tvOS 17.6, visionOS 1.3, macOS Sonoma 14.6. Processing a maliciously crafted file may lead to unexpected app termination. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support
p termination. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214117 - https://support.apple.com/en-us/HT214116 - https://support.apple.com/en-us/HT214120 - https://support.apple.com/en-us/HT214124 - https://support.apple.com/en-us/HT214119 - https://support.apple.com/en-us/HT214123 - https://support.apple.com/en-us/HT214122 - http://seclists.org/fulldisclosure/2024/Jul/16 - http://seclists.org/fulldisclosure/2024/Jul/23 - http://seclists.org/fulldisclosure/2024/Jul/21 - http://seclists.org/fulldisclosure/2024/Jul/17 - http://seclists.org/fulldisclosure/2024/Jul/22 - http://seclists.org/fulldisclosure/2024/Jul/18 -
closure/2024/Jul/17 - http://seclists.org/fulldisclosure/2024/Jul/22 - http://seclists.org/fulldisclosure/2024/Jul/18 - http://seclists.org/fulldisclosure/2024/Jul/19
CVE ID: CVE-2024-40785 State: PUBLISHED Published: 2024-07-29T22:16:56.242Z Last Updated: 2025-11-04T17:23:28.318Z Vendors: Apple Products: Safari, iOS and iPadOS, watchOS, macOS, visionOS, tvOS Problem Types: Processing maliciously crafted web content may lead to a cross site scripting attack Description: This issue was addressed with improved checks. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, Safari 17.6, iOS 17.6 and iPadOS 17.6, watchOS 10.6, tvOS 17.6, visionOS 1.3, macOS Sonoma 14.6. Processing maliciously crafted web content may lead to a cross site scripting attack. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.app
ng attack. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214121 - https://support.apple.com/en-us/HT214117 - https://support.apple.com/en-us/HT214116 - https://support.apple.com/en-us/HT214124 - https://support.apple.com/en-us/HT214119 - https://support.apple.com/en-us/HT214123 - https://support.apple.com/en-us/HT214122 - http://seclists.org/fulldisclosure/2024/Jul/16 - http://seclists.org/fulldisclosure/2024/Jul/15 - http://seclists.org/fulldisclosure/2024/Jul/23 - http://seclists.org/fulldisclosure/2024/Jul/21 - http://seclists.org/fulldisclosure/2024/Jul/17 - http://seclists.org/fulldisclosure/2024/Jul/22 - http
ure/2024/Jul/21 - http://seclists.org/fulldisclosure/2024/Jul/17 - http://seclists.org/fulldisclosure/2024/Jul/22 - http://seclists.org/fulldisclosure/2024/Jul/18
CVE ID: CVE-2024-40786 State: PUBLISHED Published: 2024-07-29T22:16:51.963Z Last Updated: 2025-11-04T17:23:32.420Z Vendors: Apple Products: iOS and iPadOS, macOS Problem Types: An attacker may be able to view sensitive user information Description: This issue was addressed through improved state management. This issue is fixed in iOS 17.6 and iPadOS 17.6, iOS 16.7.9 and iPadOS 16.7.9, macOS Ventura 13.6.8. An attacker may be able to view sensitive user information. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214117 - https://support.apple.com/en-us/HT214116 - https://support.apple.com/en-us/HT214120 - http://secl
e.com/en-us/HT214117 - https://support.apple.com/en-us/HT214116 - https://support.apple.com/en-us/HT214120 - http://seclists.org/fulldisclosure/2024/Jul/16 - http://seclists.org/fulldisclosure/2024/Jul/17 - http://seclists.org/fulldisclosure/2024/Jul/19
CVE ID: CVE-2024-40787 State: PUBLISHED Published: 2024-07-29T22:16:42.833Z Last Updated: 2025-11-04T17:23:39.205Z Vendors: Apple Products: iOS and iPadOS, macOS, watchOS Problem Types: A shortcut may be able to bypass Internet permission requirements Description: This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Ventura 13.6.8, macOS Monterey 12.7.6, iOS 17.6 and iPadOS 17.6, watchOS 10.6, macOS Sonoma 14.6. A shortcut may be able to bypass Internet permission requirements. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214117 - https://support.apple.com/en-us/HT
nt: - CVE Program Container: References: - https://support.apple.com/en-us/HT214117 - https://support.apple.com/en-us/HT214120 - https://support.apple.com/en-us/HT214124 - https://support.apple.com/en-us/HT214119 - https://support.apple.com/en-us/HT214118 - http://seclists.org/fulldisclosure/2024/Jul/16 - http://seclists.org/fulldisclosure/2024/Jul/21 - http://seclists.org/fulldisclosure/2024/Jul/20 - http://seclists.org/fulldisclosure/2024/Jul/18 - http://seclists.org/fulldisclosure/2024/Jul/19
CVE ID: CVE-2024-40788 State: PUBLISHED Published: 2024-07-29T22:17:02.532Z Last Updated: 2025-11-04T17:23:48.780Z Vendors: Apple Products: iOS and iPadOS, macOS, watchOS, visionOS, tvOS Problem Types: A local attacker may be able to cause unexpected system shutdown Description: A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, macOS Ventura 13.6.8, macOS Monterey 12.7.6, iOS 17.6 and iPadOS 17.6, watchOS 10.6, tvOS 17.6, visionOS 1.3, macOS Sonoma 14.6. A local attacker may be able to cause unexpected system shutdown. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://suppor