CVSS: 5.5EPSS: 0%CPEs: 6EXPL: 0CVE-2024-44201 – Apple Security Advisory 12-11-2024-5
https://notcve.org/view.php?id=CVE-2024-44201
11 Dec 2024 — The issue was addressed with improved memory handling. This issue is fixed in iPadOS 17.7.3, macOS Ventura 13.7.2, iOS 18.1 and iPadOS 18.1, macOS Sonoma 14.7.2. Processing a malicious crafted file may lead to a denial-of-service. macOS Ventura 13.7.2 addresses code execution vulnerabilities. • https://support.apple.com/en-us/121563 • CWE-404: Improper Resource Shutdown or Release •
CVSS: 5.5EPSS: 0%CPEs: 2EXPL: 0CVE-2024-54484 – Apple Security Advisory 12-11-2024-3
https://notcve.org/view.php?id=CVE-2024-54484
11 Dec 2024 — The issue was resolved by sanitizing logging. This issue is fixed in macOS Sequoia 15.2. An app may be able to access user-sensitive data. macOS Sequoia 15.2 addresses bypass, code execution, and out of bounds access vulnerabilities. • https://support.apple.com/en-us/121839 • CWE-281: Improper Preservation of Permissions •
CVSS: 9.8EPSS: 0%CPEs: 8EXPL: 0CVE-2024-54492 – Apple Security Advisory 12-11-2024-3
https://notcve.org/view.php?id=CVE-2024-54492
11 Dec 2024 — This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in macOS Sequoia 15.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, visionOS 2.2. An attacker in a privileged network position may be able to alter network traffic. macOS Sequoia 15.2 addresses bypass, code execution, and out of bounds access vulnerabilities. • https://support.apple.com/en-us/121837 •
CVSS: 8.2EPSS: 0%CPEs: 4EXPL: 0CVE-2024-54514 – Apple Security Advisory 12-11-2024-5
https://notcve.org/view.php?id=CVE-2024-54514
11 Dec 2024 — The issue was addressed with improved checks. This issue is fixed in watchOS 11.2, tvOS 18.2, macOS Sequoia 15.2, iOS 18.2 and iPadOS 18.2, macOS Ventura 13.7.2, macOS Sonoma 14.7.2. An app may be able to break out of its sandbox. macOS Sequoia 15.2 addresses bypass, code execution, and out of bounds access vulnerabilities. • https://support.apple.com/en-us/121837 •
CVSS: 6.5EPSS: 0%CPEs: 6EXPL: 1CVE-2024-54502 – webkit: Processing maliciously crafted web content may lead to an unexpected process crash
https://notcve.org/view.php?id=CVE-2024-54502
11 Dec 2024 — The issue was addressed with improved checks. This issue is fixed in watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, Safari 18.2, iOS 18.2 and iPadOS 18.2. Processing maliciously crafted web content may lead to an unexpected process crash. A vulnerability was found in Webkit. Processing maliciously crafted web content may lead to an unexpected process crash. • https://packetstorm.news/files/id/188628 • CWE-125: Out-of-bounds Read •
CVSS: 8.8EPSS: 0%CPEs: 2EXPL: 0CVE-2024-54471
https://notcve.org/view.php?id=CVE-2024-54471
11 Dec 2024 — This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sonoma 14.7.1, macOS Ventura 13.7.1. A malicious application may be able to leak a user's credentials. • https://support.apple.com/en-us/121568 • CWE-522: Insufficiently Protected Credentials •
CVSS: 10.0EPSS: 0%CPEs: 11EXPL: 0CVE-2024-54534 – webkit: Processing maliciously crafted web content may lead to memory corruption
https://notcve.org/view.php?id=CVE-2024-54534
11 Dec 2024 — The issue was addressed with improved memory handling. This issue is fixed in watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, Safari 18.2, iOS 18.2 and iPadOS 18.2. Processing maliciously crafted web content may lead to memory corruption. A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling. • https://support.apple.com/en-us/121837 • CWE-787: Out-of-bounds Write •
CVSS: 6.8EPSS: 0%CPEs: 1EXPL: 0CVE-2024-44220 – Apple Security Advisory 12-11-2024-3
https://notcve.org/view.php?id=CVE-2024-44220
11 Dec 2024 — The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2. Parsing a maliciously crafted video file may lead to unexpected system termination. macOS Sequoia 15.2 addresses bypass, code execution, and out of bounds access vulnerabilities. • https://support.apple.com/en-us/121839 • CWE-434: Unrestricted Upload of File with Dangerous Type •
CVSS: 10.0EPSS: 0%CPEs: 12EXPL: 0CVE-2024-54505 – webkit: Processing maliciously crafted web content may lead to memory corruption
https://notcve.org/view.php?id=CVE-2024-54505
11 Dec 2024 — A type confusion issue was addressed with improved memory handling. This issue is fixed in iPadOS 17.7.3, watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, Safari 18.2, iOS 18.2 and iPadOS 18.2. Processing maliciously crafted web content may lead to memory corruption. A flaw was found in WebKitGTK. Processing malicious web content can trigger a type confusion issue due to improper memory handling, causing memory corruption. • https://support.apple.com/en-us/121837 • CWE-843: Access of Resource Using Incompatible Type ('Type Confusion') •
CVSS: 5.7EPSS: 0%CPEs: 10EXPL: 0CVE-2024-54513 – Apple Security Advisory 12-11-2024-3
https://notcve.org/view.php?id=CVE-2024-54513
11 Dec 2024 — A permissions issue was addressed with additional restrictions. This issue is fixed in watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, iOS 18.2 and iPadOS 18.2. An app may be able to access sensitive user data. macOS Sequoia 15.2 addresses bypass, code execution, and out of bounds access vulnerabilities. • https://support.apple.com/en-us/121837 • CWE-281: Improper Preservation of Permissions •