CVSS: 5.5EPSS: 0%CPEs: 9EXPL: 0CVE-2024-27805
https://notcve.org/view.php?id=CVE-2024-27805
10 Jun 2024 — An issue was addressed with improved validation of environment variables. This issue is fixed in macOS Ventura 13.6.7, macOS Monterey 12.7.5, iOS 16.7.8 and iPadOS 16.7.8, tvOS 17.5, iOS 17.5 and iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. An app may be able to access sensitive user data. Se solucionó un problema con la validación mejorada de las variables de entorno. Este problema se solucionó en macOS Ventura 13.6.7, macOS Monterey 12.7.5, iOS 16.7.8 y iPadOS 16.7.8, tvOS 17.5, iOS 17.5 y iPadOS 17.5, w... • https://support.apple.com/en-us/HT214100 • CWE-20: Improper Input Validation •
CVSS: 5.5EPSS: 0%CPEs: 2EXPL: 0CVE-2023-40389
https://notcve.org/view.php?id=CVE-2023-40389
10 Jun 2024 — The issue was addressed with improved restriction of data container access. This issue is fixed in macOS Ventura 13.6.5, macOS Monterey 12.7.4. An app may be able to access sensitive user data. El problema se solucionó mejorando la restricción del acceso a los contenedores de datos. Este problema se solucionó en macOS Ventura 13.6.5, macOS Monterey 12.7.4. • https://support.apple.com/en-us/HT214083 •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0CVE-2024-27792
https://notcve.org/view.php?id=CVE-2024-27792
10 Jun 2024 — This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Sonoma 14.4. An app may be able to access user-sensitive data. Este problema se solucionó agregando una solicitud adicional de consentimiento del usuario. Este problema se solucionó en macOS Sonoma 14.4. • https://support.apple.com/en-us/HT214084 • CWE-284: Improper Access Control •
CVSS: 8.6EPSS: 0%CPEs: 3EXPL: 0CVE-2024-23299
https://notcve.org/view.php?id=CVE-2024-23299
10 Jun 2024 — The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.4, macOS Ventura 13.6.5, macOS Monterey 12.7.4. An app may be able to break out of its sandbox. El problema se solucionó con controles mejorados. Este problema se solucionó en macOS Sonoma 14.4, macOS Ventura 13.6.5, macOS Monterey 12.7.4. • https://support.apple.com/en-us/HT214083 • CWE-250: Execution with Unnecessary Privileges •
CVSS: 5.5EPSS: 0%CPEs: 7EXPL: 0CVE-2023-42936
https://notcve.org/view.php?id=CVE-2023-42936
28 Mar 2024 — This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Monterey 12.7.2, macOS Ventura 13.6.3, iOS 17.2 and iPadOS 17.2, tvOS 17.2, watchOS 10.2, macOS Sonoma 14.2. An app may be able to access user-sensitive data. Este problema se solucionó mejorando la redacción de información confidencial. Este problema se solucionó en macOS Monterey 12.7.2, macOS Ventura 13.6.3, iOS 17.2 y iPadOS 17.2, tvOS 17.2, watchOS 10.2, macOS Sonoma 14.2. • https://support.apple.com/en-us/HT214035 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 8.3EPSS: 2%CPEs: 3EXPL: 1CVE-2023-42931
https://notcve.org/view.php?id=CVE-2023-42931
28 Mar 2024 — The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.6.3, macOS Sonoma 14.2, macOS Monterey 12.7.2. A process may gain admin privileges without proper authentication. El problema se solucionó con controles mejorados. Este problema se solucionó en macOS Ventura 13.6.3, macOS Sonoma 14.2, macOS Monterey 12.7.2. • https://github.com/d0rb/CVE-2023-42931 • CWE-280: Improper Handling of Insufficient Permissions or Privileges •
CVSS: 8.6EPSS: 0%CPEs: 7EXPL: 0CVE-2023-42947
https://notcve.org/view.php?id=CVE-2023-42947
28 Mar 2024 — A path handling issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.7.2, macOS Ventura 13.6.3, iOS 17.2 and iPadOS 17.2, tvOS 17.2, watchOS 10.2, macOS Sonoma 14.2. An app may be able to break out of its sandbox. Se solucionó un problema de manejo de rutas con una validación mejorada. Este problema se solucionó en macOS Monterey 12.7.2, macOS Ventura 13.6.3, iOS 17.2 y iPadOS 17.2, tvOS 17.2, watchOS 10.2, macOS Sonoma 14.2. • https://support.apple.com/en-us/HT214035 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 5.5EPSS: 0%CPEs: 7EXPL: 0CVE-2023-42896
https://notcve.org/view.php?id=CVE-2023-42896
28 Mar 2024 — An issue was addressed with improved handling of temporary files. This issue is fixed in macOS Monterey 12.7.2, macOS Ventura 13.6.3, iOS 17.2 and iPadOS 17.2, iOS 16.7.3 and iPadOS 16.7.3, macOS Sonoma 14.2. An app may be able to modify protected parts of the file system. Se solucionó un problema con el manejo mejorado de archivos temporales. Este problema se solucionó en macOS Monterey 12.7.2, macOS Ventura 13.6.3, iOS 17.2 y iPadOS 17.2, iOS 16.7.3 y iPadOS 16.7.3, macOS Sonoma 14.2. • https://support.apple.com/en-us/HT214034 • CWE-862: Missing Authorization •
CVSS: 5.5EPSS: 0%CPEs: 3EXPL: 0CVE-2023-42930
https://notcve.org/view.php?id=CVE-2023-42930
28 Mar 2024 — This issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.6.3, macOS Sonoma 14.2, macOS Monterey 12.7.2. An app may be able to modify protected parts of the file system. Este problema se solucionó con controles mejorados. Este problema se solucionó en macOS Ventura 13.6.3, macOS Sonoma 14.2, macOS Monterey 12.7.2. • https://support.apple.com/en-us/HT214036 •
CVSS: 9.0EPSS: 0%CPEs: 1EXPL: 0CVE-2023-42913
https://notcve.org/view.php?id=CVE-2023-42913
28 Mar 2024 — This issue was addressed through improved state management. This issue is fixed in macOS Sonoma 14.2. Remote Login sessions may be able to obtain full disk access permissions. Esta cuestión se abordó mediante una mejor gestión de estado. Este problema se solucionó en macOS Sonoma 14.2. • https://support.apple.com/en-us/HT214036 • CWE-922: Insecure Storage of Sensitive Information •