Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-27778 State: PUBLISHED Published: 2025-01-14T14:09:34.439Z Last Updated: 2025-01-14T20:54:50.087Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:X) Vendors: Fortinet Products: FortiSandbox Problem Types: CWE-78 Description: An improper neutralization of special elements used in an OS Command vulnerability [CWE-78] in Fortinet FortiSandbox version 4.4.0 through 4.4.4, 4.2.0 through 4.2.6 and below 4.0.4 allows an authenticated attacker with at least read-only permission to execute unauthorized commands via crafted requests. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-24-061
CVE ID: CVE-2024-27779 State: PUBLISHED Published: 2025-07-18T07:58:23.943Z Last Updated: 2025-07-19T03:55:13.564Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L/E:P/RL:X/RC:C) Vendors: Fortinet Products: FortiSandbox, FortiIsolator Problem Types: CWE-613 Description: An insufficient session expiration vulnerability [CWE-613] in FortiSandbox FortiSandbox version 4.4.4 and below, version 4.2.6 and below, 4.0 all versions, 3.2 all versions and FortiIsolator version 2.4 and below, 2.3 all versions, 2.2 all versions, 2.1 all versions, 2.0 all versions, 1.2 all versions may allow a remote attacker in possession of an admin session cookie to keep using that admin's session
1.2 all versions may allow a remote attacker in possession of an admin session cookie to keep using that admin's session even after the admin user was deleted. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-24-035
CVE ID: CVE-2024-27780 State: PUBLISHED Published: 2025-02-11T16:09:12.668Z Last Updated: 2025-02-12T15:40:18.384Z Severity: LOW (CVSS 2.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N/E:F/RL:X/RC:X) Vendors: Fortinet Products: FortiSIEM Problem Types: CWE-79 Description: Multiple Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerabilities [CWE-79] in FortiSIEM 7.1 all versions, 7.0 all versions, 6.7 all versions incident page may allow an authenticated attacker to perform a cross-site scripting attack via crafted HTTP requests. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-23-324
CVE ID: CVE-2024-27781 State: PUBLISHED Published: 2025-02-11T16:09:12.324Z Last Updated: 2025-02-14T04:55:15.242Z Severity: MEDIUM (CVSS 6.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:F/RL:X/RC:X) Vendors: Fortinet Products: FortiSandbox Problem Types: CWE-79 Description: An improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiSandbox at least versions 4.4.0 through 4.4.4 and 4.2.0 through 4.2.6 and 4.0.0 through 4.0.4 and 3.2.0 through 3.2.4 and 3.1.0 through 3.1.5 and 3.0.0 through 3.0.7 allows an authenticated attacker to execute unauthorized code or commands via crafted HTTP requests. Additional Analyst Notes: - CISA ADP Vulnrichment:
r to execute unauthorized code or commands via crafted HTTP requests. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-24-063
CVE ID: CVE-2024-27782 State: PUBLISHED Published: 2024-07-09T15:33:30.678Z Last Updated: 2024-08-02T00:41:54.447Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C) Vendors: Fortinet Products: FortiAIOps Problem Types: CWE-613 Description: Multiple insufficient session expiration vulnerabilities [CWE-613] in FortiAIOps version 2.0.0 may allow an attacker to re-use stolen old session tokens to perform unauthorized operations via crafted requests. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://fortiguard.fortinet.com/psirt/FG-IR-24-069
CVE ID: CVE-2024-27783 State: PUBLISHED Published: 2024-07-09T15:33:27.135Z Last Updated: 2024-08-02T00:41:54.431Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L/E:P/RL:U/RC:C) Vendors: Fortinet Products: FortiAIOps Problem Types: CWE-352 Description: Multiple cross-site request forgery (CSRF) vulnerabilities [CWE-352] in FortiAIOps version 2.0.0 may allow an unauthenticated remote attacker to perform arbitrary actions on behalf of an authenticated user via tricking the victim to execute malicious GET requests. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://fortiguard.fortinet.com/psirt/FG-IR-24-070
CVE ID: CVE-2024-27784 State: PUBLISHED Published: 2024-07-09T15:33:27.590Z Last Updated: 2024-08-02T00:41:55.221Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C) Vendors: Fortinet Products: FortiAIOps Problem Types: CWE-532 Description: Multiple Exposure of sensitive information to an unauthorized actor vulnerabilities [CWE-200] in FortiAIOps version 2.0.0 may allow an authenticated, remote attacker to retrieve sensitive information from the API endpoint or log files. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://fortiguard.fortinet.com/psirt/FG-IR-24-072
CVE ID: CVE-2024-27785 State: PUBLISHED Published: 2024-07-09T15:33:27.182Z Last Updated: 2024-08-02T00:41:54.443Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:L/E:P/RL:U/RC:C) Vendors: Fortinet Products: FortiAIOps Problem Types: CWE-1236 Description: An improper neutralization of formula elements in a CSV File vulnerability [CWE-1236] in FortiAIOps version 2.0.0 may allow a remote authenticated attacker to execute arbitrary commands on a client's workstation via poisoned CSV reports. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://fortiguard.fortinet.com/psirt/FG-IR-24-073
CVE ID: CVE-2024-27789 State: PUBLISHED Published: 2024-05-13T23:00:51.598Z Last Updated: 2025-02-13T17:46:32.343Z Vendors: Apple Products: iOS and iPadOS, macOS Problem Types: An app may be able to access user-sensitive data Description: A logic issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, macOS Monterey 12.7.5, macOS Ventura 13.6.7, macOS Sonoma 14.4. An app may be able to access user-sensitive data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214100 - https://support.apple.com/en-us/HT214107 - https://support.apple.com/en-us/HT214105 - https://support.apple.com
214100 - https://support.apple.com/en-us/HT214107 - https://support.apple.com/en-us/HT214105 - https://support.apple.com/en-us/HT214084 - https://support.apple.com/kb/HT214084 - https://support.apple.com/kb/HT214107 - http://seclists.org/fulldisclosure/2024/May/11 - http://seclists.org/fulldisclosure/2024/May/14 - http://seclists.org/fulldisclosure/2024/May/13 - https://support.apple.com/kb/HT214105 - https://support.apple.com/kb/HT214100
CVE ID: CVE-2024-27790 State: PUBLISHED Published: 2024-04-26T15:33:46.330Z Last Updated: 2024-08-02T00:41:55.412Z Vendors: Claris Products: FileMaker Server Problem Types: Claris International has resolved an issue of potentially allowing unauthorized access to records stored in databases hosted on FileMaker Server. This issue has been fixed in FileMaker Server 20.3.2 by validating transactions before replying to client requests. Description: Claris International has resolved an issue of potentially allowing unauthorized access to records stored in databases hosted on FileMaker Server. This issue has been fixed in FileMaker Server 20.3.2 by validating transactions before replying to client
Maker Server. This issue has been fixed in FileMaker Server 20.3.2 by validating transactions before replying to client requests. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.claris.com/s/answerview?anum=000041674&language=en_US
CVE ID: CVE-2024-27791 State: PUBLISHED Published: 2024-04-24T16:43:44.979Z Last Updated: 2025-11-04T18:30:15.301Z Vendors: Apple Products: macOS, iOS and iPadOS, tvOS Problem Types: An app may be able to corrupt coprocessor memory Description: The issue was addressed with improved checks. This issue is fixed in iOS 17.3 and iPadOS 17.3, tvOS 17.3, macOS Ventura 13.6.4, iOS 16.7.5 and iPadOS 16.7.5, macOS Monterey 12.7.3, macOS Sonoma 14.3. An app may be able to corrupt coprocessor memory. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214058 - https://support.apple.com/en-us/HT214059 - https://support.apple.com/en-
s: - https://support.apple.com/en-us/HT214058 - https://support.apple.com/en-us/HT214059 - https://support.apple.com/en-us/HT214063 - https://support.apple.com/en-us/HT214055 - https://support.apple.com/en-us/HT214061 - https://support.apple.com/en-us/HT214057
CVE ID: CVE-2024-27792 State: PUBLISHED Published: 2024-06-10T19:20:58.327Z Last Updated: 2025-11-04T18:30:16.530Z Vendors: Apple Products: macOS Problem Types: An app may be able to access user-sensitive data Description: This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Sonoma 14.4. An app may be able to access user-sensitive data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214084
CVE ID: CVE-2024-27793 State: PUBLISHED Published: 2024-05-08T22:15:21.788Z Last Updated: 2025-11-04T17:18:05.159Z Vendors: Apple Products: iTunes for Windows Problem Types: Parsing a file may lead to an unexpected app termination or arbitrary code execution Description: The issue was addressed with improved checks. This issue is fixed in iTunes 12.13.2 for Windows. Parsing a file may lead to an unexpected app termination or arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214099 - http://seclists.org/fulldisclosure/2024/May/8
CVE ID: CVE-2024-27794 State: PUBLISHED Published: 2024-04-15T22:16:30.367Z Last Updated: 2024-08-02T00:41:55.211Z Vendors: Claris Products: FileMaker Server Problem Types: Claris FileMaker Server before version 20.3.2 was susceptible to a reflected Cross-Site Scripting vulnerability due to an improperly handled parameter in the FileMaker WebDirect login endpoint. Description: Claris FileMaker Server before version 20.3.2 was susceptible to a reflected Cross-Site Scripting vulnerability due to an improperly handled parameter in the FileMaker WebDirect login endpoint. The vulnerability was resolved in FileMaker Server 20.3.2 by escaping the HTML contents of the login error message on the logi
lnerability was resolved in FileMaker Server 20.3.2 by escaping the HTML contents of the login error message on the login page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.claris.com/s/article/Security-Vulnerability-in-Claris-FileMaker-Server?language=en_US
CVE ID: CVE-2024-27795 State: PUBLISHED Published: 2024-09-16T23:22:23.747Z Last Updated: 2025-11-04T16:11:28.649Z Vendors: Apple Products: macOS Problem Types: A camera extension may be able to access the internet Description: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. A camera extension may be able to access the internet. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/121238
CVE ID: CVE-2024-27796 State: PUBLISHED Published: 2024-05-13T23:00:54.914Z Last Updated: 2025-02-13T17:46:33.871Z Vendors: Apple Products: iOS and iPadOS, macOS Problem Types: An attacker may be able to elevate privileges Description: The issue was addressed with improved checks. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5. An attacker may be able to elevate privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214101 - https://support.apple.com/en-us/HT214106 - https://support.apple.com/kb/HT214107 - http://seclists.org/fulldisclosure/2024/May/10 - https://support.apple.com/kb/HT214105
/support.apple.com/kb/HT214107 - http://seclists.org/fulldisclosure/2024/May/10 - https://support.apple.com/kb/HT214105 - https://support.apple.com/kb/HT214100 - https://support.apple.com/kb/HT214106 - http://seclists.org/fulldisclosure/2024/May/12 - https://support.apple.com/kb/HT214101
CVE ID: CVE-2024-27798 State: PUBLISHED Published: 2024-05-13T23:00:46.368Z Last Updated: 2025-03-14T18:27:20.317Z Vendors: Apple Products: macOS Problem Types: An attacker may be able to elevate privileges Description: An authorization issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14.5. An attacker may be able to elevate privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214106 - https://support.apple.com/kb/HT214107 - https://support.apple.com/kb/HT214105 - https://support.apple.com/kb/HT214106 - http://seclists.org/fulldisclosure/2024/May/12
CVE ID: CVE-2024-27799 State: PUBLISHED Published: 2024-06-10T20:56:39.019Z Last Updated: 2025-03-13T16:43:59.982Z Vendors: Apple Products: iOS and iPadOS, macOS Problem Types: An unprivileged app may be able to log keystrokes in other apps including those using secure input mode Description: This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sonoma 14.5, macOS Ventura 13.6.7, macOS Monterey 12.7.5, iOS 16.7.8 and iPadOS 16.7.8. An unprivileged app may be able to log keystrokes in other apps including those using secure input mode. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/H
itional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214100 - https://support.apple.com/en-us/HT214107 - https://support.apple.com/en-us/HT214106 - https://support.apple.com/en-us/HT214105 - https://support.apple.com/kb/HT214107 - https://support.apple.com/kb/HT214105 - https://support.apple.com/kb/HT214100 - https://support.apple.com/kb/HT214106
CVE ID: CVE-2024-27800 State: PUBLISHED Published: 2024-06-10T20:56:44.028Z Last Updated: 2025-02-13T17:46:35.935Z Vendors: Apple Products: iOS and iPadOS, macOS, visionOS, watchOS, tvOS Problem Types: Processing a maliciously crafted message may lead to a denial-of-service Description: This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Ventura 13.6.7, macOS Monterey 12.7.5, iOS 16.7.8 and iPadOS 16.7.8, tvOS 17.5, visionOS 1.2, iOS 17.5 and iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. Processing a maliciously crafted message may lead to a denial-of-service. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://
a denial-of-service. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214101 - https://support.apple.com/en-us/HT214100 - https://support.apple.com/en-us/HT214107 - https://support.apple.com/en-us/HT214106 - https://support.apple.com/en-us/HT214105 - https://support.apple.com/en-us/HT214108 - https://support.apple.com/en-us/HT214104 - https://support.apple.com/en-us/HT214102 - https://support.apple.com/kb/HT214107 - https://support.apple.com/kb/HT214102 - https://support.apple.com/kb/HT214104 - https://support.apple.com/kb/HT214105 - https://support.apple.com/kb/HT214100 - https://support.apple.com/kb/HT214106 - http
s://support.apple.com/kb/HT214105 - https://support.apple.com/kb/HT214100 - https://support.apple.com/kb/HT214106 - https://support.apple.com/kb/HT214101 - https://support.apple.com/kb/HT214108 - http://seclists.org/fulldisclosure/2024/Jun/5
CVE ID: CVE-2024-27801 State: PUBLISHED Published: 2024-06-10T20:56:42.157Z Last Updated: 2025-03-27T16:32:44.556Z Vendors: Apple Products: iOS and iPadOS, macOS, visionOS, watchOS, tvOS Problem Types: An app may be able to elevate privileges Description: The issue was addressed with improved checks. This issue is fixed in tvOS 17.5, visionOS 1.2, iOS 17.5 and iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. An app may be able to elevate privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214101 - https://support.apple.com/en-us/HT214106 - https://support.apple.com/en-us/HT214108 - https://support.apple.com/en-u
1 - https://support.apple.com/en-us/HT214106 - https://support.apple.com/en-us/HT214108 - https://support.apple.com/en-us/HT214104 - https://support.apple.com/en-us/HT214102 - https://support.apple.com/kb/HT214102 - https://support.apple.com/kb/HT214104 - https://support.apple.com/kb/HT214106 - https://support.apple.com/kb/HT214101 - https://support.apple.com/kb/HT214108 - http://seclists.org/fulldisclosure/2024/Jun/5
CVE ID: CVE-2024-27802 State: PUBLISHED Published: 2024-06-10T20:56:41.329Z Last Updated: 2025-02-13T17:46:37.103Z Vendors: Apple Products: iOS and iPadOS, macOS, visionOS, tvOS Problem Types: Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.6.7, macOS Monterey 12.7.5, iOS 16.7.8 and iPadOS 16.7.8, tvOS 17.5, visionOS 1.2, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichme
file may lead to unexpected app termination or arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214101 - https://support.apple.com/en-us/HT214100 - https://support.apple.com/en-us/HT214107 - https://support.apple.com/en-us/HT214106 - https://support.apple.com/en-us/HT214105 - https://support.apple.com/en-us/HT214108 - https://support.apple.com/en-us/HT214102 - https://support.apple.com/kb/HT214107 - https://support.apple.com/kb/HT214102 - https://support.apple.com/kb/HT214105 - https://support.apple.com/kb/HT214100 - https://support.apple.com/kb/HT214106 - https://support.apple.com/kb/HT21410
5 - https://support.apple.com/kb/HT214100 - https://support.apple.com/kb/HT214106 - https://support.apple.com/kb/HT214101 - https://support.apple.com/kb/HT214108 - http://seclists.org/fulldisclosure/2024/Jun/5
CVE ID: CVE-2024-27803 State: PUBLISHED Published: 2024-05-13T23:00:49.678Z Last Updated: 2025-03-25T18:53:36.173Z Vendors: Apple Products: iOS and iPadOS Problem Types: An attacker with physical access may be able to share items from the lock screen Description: A permissions issue was addressed with improved validation. This issue is fixed in iOS 17.5 and iPadOS 17.5. An attacker with physical access may be able to share items from the lock screen. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214101 - http://seclists.org/fulldisclosure/2024/May/10 - https://support.apple.com/kb/HT214101
CVE ID: CVE-2024-27804 State: PUBLISHED Published: 2024-05-13T23:00:48.211Z Last Updated: 2025-02-13T17:46:38.277Z Vendors: Apple Products: iOS and iPadOS, macOS, watchOS, tvOS Problem Types: An app may be able to execute arbitrary code with kernel privileges Description: The issue was addressed with improved memory handling. This issue is fixed in iOS 17.5 and iPadOS 17.5, tvOS 17.5, watchOS 10.5, macOS Sonoma 14.5. An app may be able to execute arbitrary code with kernel privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214101 - https://support.apple.com/en-us/HT214106 - https://support.apple.com/en-us/HT
https://support.apple.com/en-us/HT214101 - https://support.apple.com/en-us/HT214106 - https://support.apple.com/en-us/HT214104 - https://support.apple.com/en-us/HT214102 - http://seclists.org/fulldisclosure/2024/May/17 - http://seclists.org/fulldisclosure/2024/May/10 - https://support.apple.com/kb/HT214102 - https://support.apple.com/kb/HT214104 - https://support.apple.com/kb/HT214106 - http://seclists.org/fulldisclosure/2024/May/12 - http://seclists.org/fulldisclosure/2024/May/16 - https://support.apple.com/kb/HT214101 - https://support.apple.com/kb/HT214123 - http://seclists.org/fulldisclosure/2024/Jul/23
CVE ID: CVE-2024-27805 State: PUBLISHED Published: 2024-06-10T20:56:36.274Z Last Updated: 2025-03-25T15:56:00.255Z Vendors: Apple Products: iOS and iPadOS, macOS, watchOS, tvOS Problem Types: An app may be able to access sensitive user data Description: An issue was addressed with improved validation of environment variables. This issue is fixed in macOS Ventura 13.6.7, macOS Monterey 12.7.5, iOS 16.7.8 and iPadOS 16.7.8, tvOS 17.5, iOS 17.5 and iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. An app may be able to access sensitive user data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214101 - https://support.apple
DP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214101 - https://support.apple.com/en-us/HT214100 - https://support.apple.com/en-us/HT214107 - https://support.apple.com/en-us/HT214106 - https://support.apple.com/en-us/HT214105 - https://support.apple.com/en-us/HT214104 - https://support.apple.com/en-us/HT214102 - https://support.apple.com/kb/HT214107 - https://support.apple.com/kb/HT214102 - https://support.apple.com/kb/HT214104 - https://support.apple.com/kb/HT214105 - https://support.apple.com/kb/HT214100 - https://support.apple.com/kb/HT214106 - https://support.apple.com/kb/HT214101
CVE ID: CVE-2024-27806 State: PUBLISHED Published: 2024-06-10T20:56:47.031Z Last Updated: 2025-03-14T15:29:03.124Z Vendors: Apple Products: iOS and iPadOS, macOS, watchOS, tvOS Problem Types: An app may be able to access sensitive user data Description: This issue was addressed with improved environment sanitization. This issue is fixed in macOS Ventura 13.6.7, macOS Monterey 12.7.5, iOS 16.7.8 and iPadOS 16.7.8, tvOS 17.5, iOS 17.5 and iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. An app may be able to access sensitive user data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214101 - https://support.apple.com/en-u
chment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214101 - https://support.apple.com/en-us/HT214100 - https://support.apple.com/en-us/HT214107 - https://support.apple.com/en-us/HT214106 - https://support.apple.com/en-us/HT214105 - https://support.apple.com/en-us/HT214104 - https://support.apple.com/en-us/HT214102 - https://support.apple.com/kb/HT214107 - https://support.apple.com/kb/HT214102 - https://support.apple.com/kb/HT214104 - https://support.apple.com/kb/HT214105 - https://support.apple.com/kb/HT214100 - https://support.apple.com/kb/HT214106 - https://support.apple.com/kb/HT214101
CVE ID: CVE-2024-27807 State: PUBLISHED Published: 2024-06-10T20:56:46.171Z Last Updated: 2025-03-25T16:10:41.670Z Vendors: Apple Products: iOS and iPadOS Problem Types: An app may be able to circumvent App Privacy Report logging Description: The issue was addressed with improved checks. This issue is fixed in iOS 17.5 and iPadOS 17.5, iOS 16.7.8 and iPadOS 16.7.8. An app may be able to circumvent App Privacy Report logging. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT214101 - https://support.apple.com/en-us/HT214100 - https://support.apple.com/kb/HT214100 - https://support.apple.com/kb/HT214101