CVSS: 5.5EPSS: 0%CPEs: 9EXPL: 0CVE-2024-27805
https://notcve.org/view.php?id=CVE-2024-27805
An issue was addressed with improved validation of environment variables. This issue is fixed in macOS Ventura 13.6.7, macOS Monterey 12.7.5, iOS 16.7.8 and iPadOS 16.7.8, tvOS 17.5, iOS 17.5 and iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. An app may be able to access sensitive user data. Se solucionó un problema con la validación mejorada de las variables de entorno. Este problema se solucionó en macOS Ventura 13.6.7, macOS Monterey 12.7.5, iOS 16.7.8 y iPadOS 16.7.8, tvOS 17.5, iOS 17.5 y iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. • https://support.apple.com/en-us/HT214100 https://support.apple.com/en-us/HT214101 https://support.apple.com/en-us/HT214102 https://support.apple.com/en-us/HT214104 https://support.apple.com/en-us/HT214105 https://support.apple.com/en-us/HT214106 https://support.apple.com/en-us/HT214107 https://support.apple.com/kb/HT214100 https://support.apple.com/kb/HT214101 https://support.apple.com/kb/HT214102 https://support.apple.com/kb/HT214104 https://support.app •
CVSS: 8.6EPSS: 0%CPEs: 1EXPL: 0CVE-2022-48683
https://notcve.org/view.php?id=CVE-2022-48683
An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Ventura 13. An app may be able to break out of its sandbox. Se solucionó un problema de acceso con restricciones adicionales de la zona de pruebas. Este problema se solucionó en macOS Ventura 13. • https://support.apple.com/en-us/HT213488 • CWE-284: Improper Access Control •
CVSS: 5.5EPSS: 0%CPEs: 2EXPL: 0CVE-2023-40389
https://notcve.org/view.php?id=CVE-2023-40389
The issue was addressed with improved restriction of data container access. This issue is fixed in macOS Ventura 13.6.5, macOS Monterey 12.7.4. An app may be able to access sensitive user data. El problema se solucionó mejorando la restricción del acceso a los contenedores de datos. Este problema se solucionó en macOS Ventura 13.6.5, macOS Monterey 12.7.4. • https://support.apple.com/en-us/HT214083 https://support.apple.com/en-us/HT214085 https://support.apple.com/kb/HT214035 https://support.apple.com/kb/HT214036 https://support.apple.com/kb/HT214040 https://support.apple.com/kb/HT214041 •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2024-27792
https://notcve.org/view.php?id=CVE-2024-27792
This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Sonoma 14.4. An app may be able to access user-sensitive data. Este problema se solucionó agregando una solicitud adicional de consentimiento del usuario. Este problema se solucionó en macOS Sonoma 14.4. • https://support.apple.com/en-us/HT214084 •
CVSS: 8.6EPSS: 0%CPEs: 3EXPL: 0CVE-2024-23299
https://notcve.org/view.php?id=CVE-2024-23299
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.4, macOS Ventura 13.6.5, macOS Monterey 12.7.4. An app may be able to break out of its sandbox. El problema se solucionó con controles mejorados. Este problema se solucionó en macOS Sonoma 14.4, macOS Ventura 13.6.5, macOS Monterey 12.7.4. • https://support.apple.com/en-us/HT214083 https://support.apple.com/en-us/HT214084 https://support.apple.com/en-us/HT214085 • CWE-250: Execution with Unnecessary Privileges •