CVSS: 7.8EPSS: 0%CPEs: 10EXPL: 0CVE-2024-54538
https://notcve.org/view.php?id=CVE-2024-54538
20 Dec 2024 — A denial-of-service issue was addressed with improved input validation. This issue is fixed in visionOS 2.1, iOS 18.1 and iPadOS 18.1, iOS 17.7.1 and iPadOS 17.7.1, tvOS 18.1, macOS Sonoma 14.7.1, watchOS 11.1, macOS Ventura 13.7.1. A remote attacker may be able to cause a denial-of-service. • https://support.apple.com/en-us/121563 • CWE-770: Allocation of Resources Without Limits or Throttling •
CVSS: 10.0EPSS: 0%CPEs: 3EXPL: 0CVE-2024-44299
https://notcve.org/view.php?id=CVE-2024-44299
11 Dec 2024 — The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.1 and iPadOS 18.1. An attacker may be able to cause unexpected system termination or arbitrary code execution in DCP firmware. • https://support.apple.com/en-us/121563 •
CVSS: 4.2EPSS: 0%CPEs: 3EXPL: 0CVE-2024-54503 – Apple Security Advisory 12-11-2024-1
https://notcve.org/view.php?id=CVE-2024-54503
11 Dec 2024 — An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 18.2 and iPadOS 18.2. Muting a call while ringing may not result in mute being enabled. iOS 18.2 and iPadOS 18.2 addresses code execution vulnerabilities. • https://support.apple.com/en-us/121837 •
CVSS: 5.5EPSS: 0%CPEs: 6EXPL: 0CVE-2024-44201 – Apple Security Advisory 12-11-2024-5
https://notcve.org/view.php?id=CVE-2024-44201
11 Dec 2024 — The issue was addressed with improved memory handling. This issue is fixed in iPadOS 17.7.3, macOS Ventura 13.7.2, iOS 18.1 and iPadOS 18.1, macOS Sonoma 14.7.2. Processing a malicious crafted file may lead to a denial-of-service. macOS Ventura 13.7.2 addresses code execution vulnerabilities. • https://support.apple.com/en-us/121563 • CWE-404: Improper Resource Shutdown or Release •
CVSS: 5.5EPSS: 0%CPEs: 4EXPL: 0CVE-2024-54485 – Apple Security Advisory 12-11-2024-1
https://notcve.org/view.php?id=CVE-2024-54485
11 Dec 2024 — The issue was addressed by adding additional logic. This issue is fixed in iPadOS 17.7.3, iOS 18.2 and iPadOS 18.2. An attacker with physical access to an iOS device may be able to view notification content from the lock screen. iOS 18.2 and iPadOS 18.2 addresses code execution vulnerabilities. • https://support.apple.com/en-us/121837 • CWE-922: Insecure Storage of Sensitive Information •
CVSS: 5.5EPSS: 0%CPEs: 3EXPL: 0CVE-2024-44200
https://notcve.org/view.php?id=CVE-2024-44200
11 Dec 2024 — This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.1 and iPadOS 18.1. An app may be able to read sensitive location information. • https://support.apple.com/en-us/121563 • CWE-922: Insecure Storage of Sensitive Information •
CVSS: 9.8EPSS: 0%CPEs: 8EXPL: 0CVE-2024-54492 – Apple Security Advisory 12-11-2024-3
https://notcve.org/view.php?id=CVE-2024-54492
11 Dec 2024 — This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in macOS Sequoia 15.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, visionOS 2.2. An attacker in a privileged network position may be able to alter network traffic. macOS Sequoia 15.2 addresses bypass, code execution, and out of bounds access vulnerabilities. • https://support.apple.com/en-us/121837 •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0CVE-2024-44241
https://notcve.org/view.php?id=CVE-2024-44241
11 Dec 2024 — The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.1 and iPadOS 18.1. An attacker may be able to cause unexpected system termination or arbitrary code execution in DCP firmware. • https://support.apple.com/en-us/121563 • CWE-770: Allocation of Resources Without Limits or Throttling •
CVSS: 8.2EPSS: 0%CPEs: 4EXPL: 0CVE-2024-54514 – Apple Security Advisory 12-11-2024-5
https://notcve.org/view.php?id=CVE-2024-54514
11 Dec 2024 — The issue was addressed with improved checks. This issue is fixed in watchOS 11.2, tvOS 18.2, macOS Sequoia 15.2, iOS 18.2 and iPadOS 18.2, macOS Ventura 13.7.2, macOS Sonoma 14.7.2. An app may be able to break out of its sandbox. macOS Sequoia 15.2 addresses bypass, code execution, and out of bounds access vulnerabilities. • https://support.apple.com/en-us/121837 •
CVSS: 6.5EPSS: 0%CPEs: 6EXPL: 0CVE-2024-54502 – webkit: Processing maliciously crafted web content may lead to an unexpected process crash
https://notcve.org/view.php?id=CVE-2024-54502
11 Dec 2024 — The issue was addressed with improved checks. This issue is fixed in watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, Safari 18.2, iOS 18.2 and iPadOS 18.2. Processing maliciously crafted web content may lead to an unexpected process crash. A vulnerability was found in Webkit. Processing maliciously crafted web content may lead to an unexpected process crash. • https://support.apple.com/en-us/121837 • CWE-125: Out-of-bounds Read •