CVSS: 5.5EPSS: 0%CPEs: 9EXPL: 0CVE-2024-27805
https://notcve.org/view.php?id=CVE-2024-27805
An issue was addressed with improved validation of environment variables. This issue is fixed in macOS Ventura 13.6.7, macOS Monterey 12.7.5, iOS 16.7.8 and iPadOS 16.7.8, tvOS 17.5, iOS 17.5 and iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. An app may be able to access sensitive user data. Se solucionó un problema con la validación mejorada de las variables de entorno. Este problema se solucionó en macOS Ventura 13.6.7, macOS Monterey 12.7.5, iOS 16.7.8 y iPadOS 16.7.8, tvOS 17.5, iOS 17.5 y iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. • https://support.apple.com/en-us/HT214100 https://support.apple.com/en-us/HT214101 https://support.apple.com/en-us/HT214102 https://support.apple.com/en-us/HT214104 https://support.apple.com/en-us/HT214105 https://support.apple.com/en-us/HT214106 https://support.apple.com/en-us/HT214107 https://support.apple.com/kb/HT214100 https://support.apple.com/kb/HT214101 https://support.apple.com/kb/HT214102 https://support.apple.com/kb/HT214104 https://support.app •
CVSS: 5.5EPSS: 0%CPEs: 2EXPL: 0CVE-2023-40389
https://notcve.org/view.php?id=CVE-2023-40389
The issue was addressed with improved restriction of data container access. This issue is fixed in macOS Ventura 13.6.5, macOS Monterey 12.7.4. An app may be able to access sensitive user data. El problema se solucionó mejorando la restricción del acceso a los contenedores de datos. Este problema se solucionó en macOS Ventura 13.6.5, macOS Monterey 12.7.4. • https://support.apple.com/en-us/HT214083 https://support.apple.com/en-us/HT214085 https://support.apple.com/kb/HT214035 https://support.apple.com/kb/HT214036 https://support.apple.com/kb/HT214040 https://support.apple.com/kb/HT214041 •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2024-27792
https://notcve.org/view.php?id=CVE-2024-27792
This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Sonoma 14.4. An app may be able to access user-sensitive data. Este problema se solucionó agregando una solicitud adicional de consentimiento del usuario. Este problema se solucionó en macOS Sonoma 14.4. • https://support.apple.com/en-us/HT214084 •
CVSS: 8.6EPSS: 0%CPEs: 3EXPL: 0CVE-2024-23299
https://notcve.org/view.php?id=CVE-2024-23299
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.4, macOS Ventura 13.6.5, macOS Monterey 12.7.4. An app may be able to break out of its sandbox. El problema se solucionó con controles mejorados. Este problema se solucionó en macOS Sonoma 14.4, macOS Ventura 13.6.5, macOS Monterey 12.7.4. • https://support.apple.com/en-us/HT214083 https://support.apple.com/en-us/HT214084 https://support.apple.com/en-us/HT214085 • CWE-250: Execution with Unnecessary Privileges •
CVSS: 5.5EPSS: 0%CPEs: 7EXPL: 0CVE-2023-42936
https://notcve.org/view.php?id=CVE-2023-42936
This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Monterey 12.7.2, macOS Ventura 13.6.3, iOS 17.2 and iPadOS 17.2, tvOS 17.2, watchOS 10.2, macOS Sonoma 14.2. An app may be able to access user-sensitive data. Este problema se solucionó mejorando la redacción de información confidencial. Este problema se solucionó en macOS Monterey 12.7.2, macOS Ventura 13.6.3, iOS 17.2 y iPadOS 17.2, tvOS 17.2, watchOS 10.2, macOS Sonoma 14.2. • https://support.apple.com/en-us/HT214035 https://support.apple.com/en-us/HT214036 https://support.apple.com/en-us/HT214037 https://support.apple.com/en-us/HT214038 https://support.apple.com/en-us/HT214040 https://support.apple.com/en-us/HT214041 •