deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-50457
Published: 2024-10-28
Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Qode Qode Essential Addons qode-essential-addons.This issue affects Qode Essential Addons: from n/a through <= 1.6.3.
CVSS Score: 7.5 (HIGH)
CWE: CWE-98
References: https://patchstack.com/database/Wordpress/Plugin/qode-essential-addons/vulnerability/wordpress-qode-essential-addons-plugin-1-6-3-local-file-inclusion-vulnerability?_s_id=cve
CVE: CVE-2024-27849
Published: 2024-10-28
Description: A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15. An app may be able to read sensitive location information.
CVSS Score: 3.3 (LOW)
CWE: CWE-532, CWE-532
References: https://support.apple.com/en-us/121238
CVE: CVE-2024-40792
Published: 2024-10-28
Description: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. A malicious app may be able to change network settings.
CVSS Score: 3.3 (LOW)
CWE: CWE-276
References: https://support.apple.com/en-us/121238
CVE: CVE-2024-40851
Published: 2024-10-28
Description: This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 18.1 and iPadOS 18.1. An attacker with physical access may be able to access contact photos from the lock screen.
CVSS Score: 2.4 (LOW)
References: https://support.apple.com/en-us/121563; http://seclists.org/fulldisclosure/2024/Oct/9
CVE: CVE-2024-40853
Published: 2024-10-28
Description: This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 18 and iPadOS 18. An attacker may be able to use Siri to enable Auto-Answer Calls.
CVSS Score: 3.3 (LOW)
References: https://support.apple.com/en-us/121250
CVE: CVE-2024-40855
Published: 2024-10-28
Description: The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7.1, macOS Ventura 13.7.1, visionOS 2. A sandboxed app may be able to access sensitive user data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-863
References: https://support.apple.com/en-us/121238; https://support.apple.com/en-us/121249; https://support.apple.com/en-us/121568
CVE: CVE-2024-40867
Published: 2024-10-28
Description: A custom URL scheme handling issue was addressed with improved input validation. This issue is fixed in iOS 18.1 and iPadOS 18.1. A remote attacker may be able to break out of Web Content sandbox.
CVSS Score: 9.6 (CRITICAL)
References: https://support.apple.com/en-us/121563; http://seclists.org/fulldisclosure/2024/Oct/9
CVE: CVE-2024-42011
Published: 2024-10-28
Description: The Spotify app 8.9.58 for iOS has a buffer overflow in its use of strcat.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://community.spotify.com/t5/iOS-iPhone-iPad/Spotify-constantly-crashes-lags-and-heats-up-my-battery/td-p/6217537; https://luminous-reminder-337.notion.site/Buffer-Overflow-Vulnerability-in-Spotify-iOS-App-Steps-to-Reproduce-By-0xRushy-5114aa2548e2401eb6812a12af888b8c
CVE: CVE-2024-44122
Published: 2024-10-28
Description: A logic issue was addressed with improved checks. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. An application may be able to break out of its sandbox.
CVSS Score: 8.8 (HIGH)
CWE: CWE-693
References: https://support.apple.com/en-us/121238; https://support.apple.com/en-us/121250; https://support.apple.com/en-us/121568
CVE: CVE-2024-44123
Published: 2024-10-28
Description: A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. A malicious app with root privileges may be able to access keyboard input and location information without user consent.
CVSS Score: 2.3 (LOW)
References: https://support.apple.com/en-us/121238; https://support.apple.com/en-us/121250
CVE: CVE-2024-44126
Published: 2024-10-28
Description: The issue was addressed with improved checks. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7.1, visionOS 2. Processing a maliciously crafted file may lead to heap corruption.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://support.apple.com/en-us/121238; https://support.apple.com/en-us/121246; https://support.apple.com/en-us/121247
CVE: CVE-2024-44137
Published: 2024-10-28
Description: The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. An attacker with physical access may be able to share items from the lock screen.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-863
References: https://support.apple.com/en-us/121238; https://support.apple.com/en-us/121568; https://support.apple.com/en-us/121570
CVE: CVE-2024-44144
Published: 2024-10-28
Description: A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7.1, tvOS 18, visionOS 2, watchOS 11. Processing a maliciously crafted file may lead to unexpected app termination.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-120, CWE-120
References: https://support.apple.com/en-us/121238; https://support.apple.com/en-us/121240; https://support.apple.com/en-us/121248
CVE: CVE-2024-44155
Published: 2024-10-28
Description: A custom URL scheme handling issue was addressed with improved input validation. This issue is fixed in Safari 18, iOS 17.7.1 and iPadOS 17.7.1, iOS 18 and iPadOS 18, macOS Sequoia 15, watchOS 11. Maliciously crafted web content may violate iframe sandboxing policy.
CVSS Score: 6.5 (MEDIUM)
References: https://support.apple.com/en-us/121238; https://support.apple.com/en-us/121240; https://support.apple.com/en-us/121241
CVE: CVE-2024-44156
Published: 2024-10-28
Description: A path deletion vulnerability was addressed by preventing vulnerable code from running with privileges. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. An app may be able to bypass Privacy preferences.
CVSS Score: 7.1 (HIGH)
CWE: CWE-862
References: https://support.apple.com/en-us/121564; https://support.apple.com/en-us/121568; https://support.apple.com/en-us/121570
CVE: CVE-2024-44159
Published: 2024-10-28
Description: A path deletion vulnerability was addressed by preventing vulnerable code from running with privileges. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. An app may be able to bypass Privacy preferences.
CVSS Score: 7.1 (HIGH)
References: https://support.apple.com/en-us/121564; https://support.apple.com/en-us/121568; https://support.apple.com/en-us/121570
CVE: CVE-2024-44174
Published: 2024-10-28
Description: The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15. An attacker may be able to view restricted content from the lock screen.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-754, CWE-922
References: https://support.apple.com/en-us/121238
CVE: CVE-2024-44175
Published: 2024-10-28
Description: This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7.1. An app may be able to access sensitive user data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-59, CWE-922
References: https://support.apple.com/en-us/121238; https://support.apple.com/en-us/121570; http://seclists.org/fulldisclosure/2024/Oct/12
CVE: CVE-2024-44194
Published: 2024-10-28
Description: This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, visionOS 2.1, watchOS 11.1. An app may be able to access sensitive user data.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/121563; https://support.apple.com/en-us/121564; https://support.apple.com/en-us/121565
CVE: CVE-2024-44196
Published: 2024-10-28
Description: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. An app may be able to modify protected parts of the file system.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-863
References: https://support.apple.com/en-us/121564; https://support.apple.com/en-us/121568; https://support.apple.com/en-us/121570
CVE: CVE-2024-44197
Published: 2024-10-28
Description: The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. An app may be able to cause unexpected system termination or corrupt kernel memory.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/121564; https://support.apple.com/en-us/121568; https://support.apple.com/en-us/121570
CVE: CVE-2024-44203
Published: 2024-10-28
Description: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. An app may be able to access a user's Photos Library.
CVSS Score: 7.5 (HIGH)
References: https://support.apple.com/en-us/121238
CVE: CVE-2024-44208
Published: 2024-10-28
Description: This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15. An app may be able to bypass certain Privacy preferences.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: https://support.apple.com/en-us/121238
CVE: CVE-2024-44213
Published: 2024-10-28
Description: An issue existed in the parsing of URLs. This issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. An attacker in a privileged network position may be able to leak sensitive user information.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-922
References: https://support.apple.com/en-us/121564; https://support.apple.com/en-us/121568; https://support.apple.com/en-us/121570
CVE: CVE-2024-44215
Published: 2024-10-28
Description: This issue was addressed with improved checks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1, tvOS 18.1, visionOS 2.1, watchOS 11.1. Processing an image may result in disclosure of process memory.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/121563; https://support.apple.com/en-us/121564; https://support.apple.com/en-us/121565
CVE: CVE-2024-44218
Published: 2024-10-28
Description: This issue was addressed with improved checks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS Sonoma 14.7.1. Processing a maliciously crafted file may lead to heap corruption.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-120
References: https://support.apple.com/en-us/121563; https://support.apple.com/en-us/121564; https://support.apple.com/en-us/121567
CVE: CVE-2024-44222
Published: 2024-10-28
Description: This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. An app may be able to read sensitive location information.
CVSS Score: 3.3 (LOW)
CWE: CWE-922, CWE-922
References: https://support.apple.com/en-us/121564; https://support.apple.com/en-us/121568; https://support.apple.com/en-us/121570
CVE: CVE-2024-44228
Published: 2024-10-28
Description: This issue was addressed with improved permissions checking. This issue is fixed in Xcode 16. An app may be able to inherit Xcode permissions and access user data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-276
References: https://support.apple.com/en-us/121239
CVE: CVE-2024-44229
Published: 2024-10-28
Description: An information leakage was addressed with additional validation. This issue is fixed in Safari 18.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, visionOS 2.1. Private browsing may leak some browsing history.
CVSS Score: 5.3 (MEDIUM)
References: https://support.apple.com/en-us/121563; https://support.apple.com/en-us/121564; https://support.apple.com/en-us/121566
CVE: CVE-2024-44235
Published: 2024-10-28
Description: The issue was addressed with improved checks. This issue is fixed in iOS 18.1 and iPadOS 18.1. An attacker may be able to view restricted content from the lock screen.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-754, CWE-754
References: https://support.apple.com/en-us/121563; http://seclists.org/fulldisclosure/2024/Oct/9
CVE: CVE-2024-44236
Published: 2024-10-28
Description: An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. Processing a maliciously crafted file may lead to unexpected app termination.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-787
References: https://support.apple.com/en-us/121564; https://support.apple.com/en-us/121568; https://support.apple.com/en-us/121570
CVE: CVE-2024-44239
Published: 2024-10-28
Description: An information disclosure issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1, tvOS 18.1, visionOS 2.1, watchOS 11.1. An app may be able to leak sensitive kernel state.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-532, CWE-532
References: https://support.apple.com/en-us/121563; https://support.apple.com/en-us/121564; https://support.apple.com/en-us/121565
CVE: CVE-2024-44244
Published: 2024-10-28
Description: A memory corruption issue was addressed with improved input validation. This issue is fixed in Safari 18.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, tvOS 18.1, visionOS 2.1, watchOS 11.1. Processing maliciously crafted web content may lead to an unexpected process crash.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://support.apple.com/en-us/121563; https://support.apple.com/en-us/121564; https://support.apple.com/en-us/121565
CVE: CVE-2024-44247
Published: 2024-10-28
Description: The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. A malicious application may be able to modify protected parts of the file system.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-863
References: https://support.apple.com/en-us/121564; https://support.apple.com/en-us/121568; https://support.apple.com/en-us/121570
CVE: CVE-2024-44251
Published: 2024-10-28
Description: This issue was addressed through improved state management. This issue is fixed in iOS 18.1 and iPadOS 18.1. An attacker may be able to view restricted content from the lock screen.
CVSS Score: 2.4 (LOW)
References: https://support.apple.com/en-us/121563; http://seclists.org/fulldisclosure/2024/Oct/9
CVE: CVE-2024-44252
Published: 2024-10-28
Description: A logic issue was addressed with improved file handling. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, tvOS 18.1, visionOS 2.1. Restoring a maliciously crafted backup file may lead to modification of protected system files.
CVSS Score: 7.1 (HIGH)
References: https://support.apple.com/en-us/121563; https://support.apple.com/en-us/121566; https://support.apple.com/en-us/121567
CVE: CVE-2024-44253
Published: 2024-10-28
Description: The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. An app may be able to modify protected parts of the file system.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-863
References: https://support.apple.com/en-us/121564; https://support.apple.com/en-us/121568; https://support.apple.com/en-us/121570
CVE: CVE-2024-44254
Published: 2024-10-28
Description: This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1, watchOS 11.1. An app may be able to access sensitive user data.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/121563; https://support.apple.com/en-us/121564; https://support.apple.com/en-us/121565
CVE: CVE-2024-44255
Published: 2024-10-28
Description: A path handling issue was addressed with improved logic. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1, tvOS 18.1, visionOS 2.1, watchOS 11.1. A malicious app may be able to run arbitrary shortcuts without user consent.
CVSS Score: 7.8 (HIGH)
CWE: CWE-22, CWE-22
References: https://support.apple.com/en-us/121563; https://support.apple.com/en-us/121564; https://support.apple.com/en-us/121565
CVE: CVE-2024-44258
Published: 2024-10-28
Description: This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, tvOS 18.1, visionOS 2.1. Restoring a maliciously crafted backup file may lead to modification of protected system files.
CVSS Score: 7.1 (HIGH)
CWE: CWE-59, CWE-59
References: https://support.apple.com/en-us/121563; https://support.apple.com/en-us/121566; https://support.apple.com/en-us/121567
CVE: CVE-2024-44259
Published: 2024-10-28
Description: This issue was addressed through improved state management. This issue is fixed in Safari 18.1, iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, visionOS 2.1. An attacker may be able to misuse a trust relationship to download malicious content.
CVSS Score: 7.5 (HIGH)
References: https://support.apple.com/en-us/121563; https://support.apple.com/en-us/121564; https://support.apple.com/en-us/121566
CVE: CVE-2024-44261
Published: 2024-10-28
Description: This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1. An attacker may be able to view restricted content from the lock screen.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/121563; https://support.apple.com/en-us/121567; http://seclists.org/fulldisclosure/2024/Oct/10
CVE: CVE-2024-44262
Published: 2024-10-28
Description: This issue was addressed with improved redaction of sensitive information. This issue is fixed in visionOS 2.1. A user may be able to view sensitive user information.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/121566; http://seclists.org/fulldisclosure/2024/Oct/16
CVE: CVE-2024-44263
Published: 2024-10-28
Description: A logic issue was addressed with improved state management. This issue is fixed in iOS 18.1 and iPadOS 18.1. An app may be able to access user-sensitive data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-922
References: https://support.apple.com/en-us/121563; http://seclists.org/fulldisclosure/2024/Oct/9
CVE: CVE-2024-44264
Published: 2024-10-28
Description: This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. A malicious app may be able to create symlinks to protected regions of the disk.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-59, CWE-59
References: https://support.apple.com/en-us/121564; https://support.apple.com/en-us/121568; https://support.apple.com/en-us/121570
CVE: CVE-2024-44265
Published: 2024-10-28
Description: The issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. An attacker with physical access can input Game Controller events to apps running on a locked device.
CVSS Score: 2.4 (LOW)
CWE: CWE-862
References: https://support.apple.com/en-us/121564; https://support.apple.com/en-us/121568; https://support.apple.com/en-us/121570
CVE: CVE-2024-44267
Published: 2024-10-28
Description: The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. A malicious application may be able to modify protected parts of the file system.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/121564; https://support.apple.com/en-us/121568; https://support.apple.com/en-us/121570
CVE: CVE-2024-44269
Published: 2024-10-28
Description: A logic issue was addressed with improved checks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1, visionOS 2.1, watchOS 11.1. A malicious app may use shortcuts to access restricted files.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/121563; https://support.apple.com/en-us/121564; https://support.apple.com/en-us/121565
CVE: CVE-2024-44270
Published: 2024-10-28
Description: A logic issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. A sandboxed process may be able to circumvent sandbox restrictions.
CVSS Score: 8.6 (HIGH)
CWE: CWE-863
References: https://support.apple.com/en-us/121564; https://support.apple.com/en-us/121568; https://support.apple.com/en-us/121570
CVE: CVE-2024-44273
Published: 2024-10-28
Description: This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS Sonoma 14.7.1, tvOS 18.1, visionOS 2.1, watchOS 11.1. A malicious app may be able to access private information.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-59, CWE-59
References: https://support.apple.com/en-us/121563; https://support.apple.com/en-us/121564; https://support.apple.com/en-us/121565
CVE: CVE-2024-44274
Published: 2024-10-28
Description: The issue was addressed with improved authentication. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, watchOS 11.1. An attacker with physical access to a locked device may be able to view sensitive user information.
CVSS Score: 4.6 (MEDIUM)
References: https://support.apple.com/en-us/121563; https://support.apple.com/en-us/121565; https://support.apple.com/en-us/121567
CVE: CVE-2024-44275
Published: 2024-10-28
Description: The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. A malicious application may be able to modify protected parts of the file system.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-922
References: https://support.apple.com/en-us/121564; https://support.apple.com/en-us/121568; https://support.apple.com/en-us/121570
CVE: CVE-2024-44277
Published: 2024-10-28
Description: The issue was addressed with improved memory handling. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, tvOS 18.1, visionOS 2.1. An app may be able to cause unexpected system termination or corrupt kernel memory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/121563; https://support.apple.com/en-us/121564; https://support.apple.com/en-us/121566
CVE: CVE-2024-44278
Published: 2024-10-28
Description: An information disclosure issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1, visionOS 2.1, watchOS 11.1. A sandboxed app may be able to access sensitive user data in system logs.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/121563; https://support.apple.com/en-us/121564; https://support.apple.com/en-us/121565
CVE: CVE-2024-44279
Published: 2024-10-28
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. Parsing a file may lead to disclosure of user information.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://support.apple.com/en-us/121564; https://support.apple.com/en-us/121568; https://support.apple.com/en-us/121570
CVE: CVE-2024-44280
Published: 2024-10-28
Description: A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. An app may be able to modify protected parts of the file system.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/121564; https://support.apple.com/en-us/121568; https://support.apple.com/en-us/121570