CVSS: 4.9EPSS: 0%CPEs: 3EXPL: 0CVE-2024-54470
https://notcve.org/view.php?id=CVE-2024-54470
15 Jan 2025 — A logic issue was addressed with improved checks. This issue is fixed in iOS 18.1 and iPadOS 18.1, iOS 17.7.1 and iPadOS 17.7.1. An attacker with physical access may be able to access contacts from the lock screen. Se solucionó un problema de lógica con comprobaciones mejoradas. Este problema se solucionó en iOS 18.1 y iPadOS 18.1, iOS 17.7.1 y iPadOS 17.7.1. • https://support.apple.com/en-us/121563 • CWE-862: Missing Authorization •
CVSS: 4.3EPSS: 0%CPEs: 7EXPL: 0CVE-2024-54535
https://notcve.org/view.php?id=CVE-2024-54535
15 Jan 2025 — A path handling issue was addressed with improved logic. This issue is fixed in watchOS 11.1, visionOS 2.1, iOS 18.1 and iPadOS 18.1. An attacker with access to calendar data could also read reminders. Se solucionó un problema de manejo de rutas con una lógica mejorada. Este problema se solucionó en watchOS 11.1, visionOS 2.1, iOS 18.1 y iPadOS 18.1. • https://support.apple.com/en-us/121563 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 6.5EPSS: 0%CPEs: 5EXPL: 0CVE-2024-40854
https://notcve.org/view.php?id=CVE-2024-40854
15 Jan 2025 — A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 18.1 and iPadOS 18.1, iOS 17.7.1 and iPadOS 17.7.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. An app may be able to cause unexpected system termination. Se solucionó un problema de inicialización de memoria con un manejo mejorado de la memoria. Este problema se solucionó en iOS 18.1 y iPadOS 18.1, iOS 17.7.1 y iPadOS 17.7.1, macOS Sonoma 14.7.1 y macOS Ventura 13.7.1. • https://support.apple.com/en-us/121563 •
CVSS: 2.4EPSS: 0%CPEs: 3EXPL: 0CVE-2024-40839
https://notcve.org/view.php?id=CVE-2024-40839
15 Jan 2025 — This issue was addressed through improved state management. This issue is fixed in iOS 17.5 and iPadOS 17.5. An attacker with physical access to an iOS device may be able to view notification contents from the Lock Screen. Este problema se solucionó mediante una mejor gestión de estados. Este problema se solucionó en iOS 17.5 y iPadOS 17.5. • https://support.apple.com/en-us/120905 • CWE-862: Missing Authorization •
CVSS: 8.4EPSS: 0%CPEs: 9EXPL: 0CVE-2024-40771
https://notcve.org/view.php?id=CVE-2024-40771
15 Jan 2025 — The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, watchOS 10.5, tvOS 17.5, macOS Ventura 13.6.7, visionOS 1.2. An app may be able to execute arbitrary code with kernel privileges. El problema se solucionó con una gestión de memoria mejorada. Este problema se solucionó en macOS Sonoma 14.5, iOS 16.7.8 y iPadOS 16.7.8, iOS 17.5 y iPadOS 17.5, macOS Monterey 12.7.5, watchOS 10.5, tvOS 1... • https://support.apple.com/en-us/120898 • CWE-863: Incorrect Authorization •
CVSS: 8.8EPSS: 0%CPEs: 24EXPL: 0CVE-2024-27856 – Apple WebKit WebCore ContainerNode Use-After-Free Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2024-27856
15 Jan 2025 — The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.5, iOS 16.7.8 and iPadOS 16.7.8, Safari 17.5, iOS 17.5 and iPadOS 17.5, watchOS 10.5, tvOS 17.5, visionOS 1.2. Processing a file may lead to unexpected app termination or arbitrary code execution. A flaw was found in WebKitGTK. Processing malicious web content can cause unexpected app termination or arbitrary code execution due to improper checks. • https://support.apple.com/en-us/120896 • CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 7.8EPSS: 0%CPEs: 10EXPL: 0CVE-2024-54538
https://notcve.org/view.php?id=CVE-2024-54538
20 Dec 2024 — A denial-of-service issue was addressed with improved input validation. This issue is fixed in visionOS 2.1, iOS 18.1 and iPadOS 18.1, iOS 17.7.1 and iPadOS 17.7.1, tvOS 18.1, macOS Sonoma 14.7.1, watchOS 11.1, macOS Ventura 13.7.1. A remote attacker may be able to cause a denial-of-service. • https://support.apple.com/en-us/121563 • CWE-770: Allocation of Resources Without Limits or Throttling •
CVSS: 10.0EPSS: 0%CPEs: 3EXPL: 0CVE-2024-44299
https://notcve.org/view.php?id=CVE-2024-44299
11 Dec 2024 — The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.1 and iPadOS 18.1. An attacker may be able to cause unexpected system termination or arbitrary code execution in DCP firmware. • https://support.apple.com/en-us/121563 •
CVSS: 4.2EPSS: 0%CPEs: 3EXPL: 0CVE-2024-54503 – Apple Security Advisory 12-11-2024-1
https://notcve.org/view.php?id=CVE-2024-54503
11 Dec 2024 — An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 18.2 and iPadOS 18.2. Muting a call while ringing may not result in mute being enabled. iOS 18.2 and iPadOS 18.2 addresses code execution vulnerabilities. • https://support.apple.com/en-us/121837 •
CVSS: 5.5EPSS: 0%CPEs: 6EXPL: 0CVE-2024-44201 – Apple Security Advisory 12-11-2024-5
https://notcve.org/view.php?id=CVE-2024-44201
11 Dec 2024 — The issue was addressed with improved memory handling. This issue is fixed in iPadOS 17.7.3, macOS Ventura 13.7.2, iOS 18.1 and iPadOS 18.1, macOS Sonoma 14.7.2. Processing a malicious crafted file may lead to a denial-of-service. macOS Ventura 13.7.2 addresses code execution vulnerabilities. • https://support.apple.com/en-us/121563 • CWE-404: Improper Resource Shutdown or Release •