CVSS: 5.5EPSS: 0%CPEs: 8EXPL: 0CVE-2024-23264 – Apple macOS Metal Framework PVR File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2024-23264
08 Mar 2024 — A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Monterey 12.7.4, macOS Ventura 13.6.5, macOS Sonoma 14.4, visionOS 1.1, iOS 17.4 and iPadOS 17.4, iOS 16.7.6 and iPadOS 16.7.6, tvOS 17.4. An application may be able to read restricted memory. Se solucionó un problema de validación con una mejor desinfección de los insumos. Este problema se solucionó en macOS Monterey 12.7.4, macOS Ventura 13.6.5, macOS Sonoma 14.4, visionOS 1.1, iOS 17.4 y iPadOS 17.4, iOS 16.7.... • http://seclists.org/fulldisclosure/2024/Mar/21 • CWE-125: Out-of-bounds Read •
CVSS: 7.5EPSS: 0%CPEs: 10EXPL: 0CVE-2024-23291
https://notcve.org/view.php?id=CVE-2024-23291
08 Mar 2024 — A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in tvOS 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, watchOS 10.4. A malicious app may be able to observe user data in log entries related to accessibility notifications. Se solucionó un problema de privacidad mejorando la redacción de datos privados para las entradas de registro. Este problema se solucionó en tvOS 17.4, iOS 17.4 y iPadOS 17.4, macOS Sonoma 14.4, watchOS 10.4. • http://seclists.org/fulldisclosure/2024/Mar/21 •
CVSS: 10.0EPSS: 0%CPEs: 23EXPL: 0CVE-2024-23226
https://notcve.org/view.php?id=CVE-2024-23226
08 Mar 2024 — The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.4, visionOS 1.1, iOS 17.4 and iPadOS 17.4, watchOS 10.4, tvOS 17.4. Processing web content may lead to arbitrary code execution. El problema se solucionó mejorando el manejo de la memoria. Este problema se solucionó en macOS Sonoma 14.4, visionOS 1.1, iOS 17.4 y iPadOS 17.4, watchOS 10.4, tvOS 17.4. • http://seclists.org/fulldisclosure/2024/Mar/21 •
CVSS: 5.5EPSS: 0%CPEs: 7EXPL: 0CVE-2024-23289
https://notcve.org/view.php?id=CVE-2024-23289
08 Mar 2024 — A lock screen issue was addressed with improved state management. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, watchOS 10.4. A person with physical access to a device may be able to use Siri to access private calendar information. Se solucionó un problema de la pantalla de bloqueo con una gestión de estado mejorada. Este problema se solucionó en iOS 16.7.6 y iPadOS 16.7.6, iOS 17.4 y iPadOS 17.4, macOS Sonoma 14.4, watchOS 10.4. • http://seclists.org/fulldisclosure/2024/Mar/21 •
CVSS: 4.9EPSS: 0%CPEs: 8EXPL: 0CVE-2024-23293
https://notcve.org/view.php?id=CVE-2024-23293
08 Mar 2024 — This issue was addressed through improved state management. This issue is fixed in tvOS 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, watchOS 10.4. An attacker with physical access may be able to use Siri to access sensitive user data. Esta cuestión se abordó mediante una mejor gestión de estado. Este problema se solucionó en tvOS 17.4, iOS 17.4 y iPadOS 17.4, macOS Sonoma 14.4, watchOS 10.4. • http://seclists.org/fulldisclosure/2024/Mar/21 •
CVSS: 6.5EPSS: 0%CPEs: 6EXPL: 0CVE-2024-23241
https://notcve.org/view.php?id=CVE-2024-23241
08 Mar 2024 — This issue was addressed through improved state management. This issue is fixed in tvOS 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4. An app may be able to leak sensitive user information. Esta cuestión se abordó mediante una mejor gestión de estado. Este problema se solucionó en tvOS 17.4, iOS 17.4 y iPadOS 17.4, macOS Sonoma 14.4. • http://seclists.org/fulldisclosure/2024/Mar/21 • CWE-922: Insecure Storage of Sensitive Information •
CVSS: 6.2EPSS: 0%CPEs: 8EXPL: 0CVE-2024-23201
https://notcve.org/view.php?id=CVE-2024-23201
08 Mar 2024 — A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Monterey 12.7.4, watchOS 10.3, tvOS 17.3, macOS Ventura 13.6.5, iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3. An app may be able to cause a denial-of-service. Se solucionó un problema de permisos con restricciones adicionales. Este problema se solucionó en macOS Monterey 12.7.4, watchOS 10.3, tvOS 17.3, macOS Ventura 13.6.5, iOS 17.3 y iPadOS 17.3, macOS Sonoma 14.3. • http://seclists.org/fulldisclosure/2024/Mar/22 • CWE-276: Incorrect Default Permissions •
CVSS: 2.4EPSS: 0%CPEs: 3EXPL: 0CVE-2024-23240
https://notcve.org/view.php?id=CVE-2024-23240
08 Mar 2024 — The issue was addressed with improved checks. This issue is fixed in iOS 17.4 and iPadOS 17.4. Shake-to-undo may allow a deleted photo to be re-surfaced without authentication. El problema se solucionó con controles mejorados. Este problema se solucionó en iOS 17.4 y iPadOS 17.4. • https://support.apple.com/en-us/HT214081 •
CVSS: 6.2EPSS: 0%CPEs: 5EXPL: 0CVE-2024-23283
https://notcve.org/view.php?id=CVE-2024-23283
08 Mar 2024 — A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app may be able to access user-sensitive data. Se solucionó un problema de privacidad mejorando la redacción de datos privados para las entradas de registro. Este problema se solucionó en iOS 16.7.6 y iPadOS 16.7.6, macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. • http://seclists.org/fulldisclosure/2024/Mar/21 •
CVSS: 5.5EPSS: 0%CPEs: 8EXPL: 0CVE-2023-42823
https://notcve.org/view.php?id=CVE-2023-42823
21 Feb 2024 — The issue was resolved by sanitizing logging This issue is fixed in watchOS 10.1, macOS Sonoma 14.1, tvOS 17.1, macOS Monterey 12.7.1, iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1, macOS Ventura 13.6.1. An app may be able to access user-sensitive data. El problema se resolvió sanitizando el registro. Este problema se solucionó en watchOS 10.1, macOS Sonoma 14.1, tvOS 17.1, macOS Monterey 12.7.1, iOS 16.7.2 y iPadOS 16.7.2, iOS 17.1 y iPadOS 17.1, macOS Ventura 13.6.1. Es posible que una aplicación... • https://support.apple.com/en-us/HT213981 • CWE-922: Insecure Storage of Sensitive Information •