High 1 exploited CVE NCSC-2024-0219 14 CVEs

Kwetsbaarheden verholpen in Apple iOS en iPadOS

Published May 15, 2024 · Updated May 15, 2024 · nl

Vendor: Apple Product: iOS and iPadOS

Summary

Apple heeft kwetsbaarheden verholpen in iOS en iPadOS.

Details

Interpretaties
Voor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide app te installeren en draaien, of een malafide link te volgen.

Oplossingen
Apple heeft updates uitgebracht om de kwetsbaarheden te verhelpen in iOS en iPadOS 17.5

Vulnerabilities 14

Medium 5.5

CVE-2024-27834 Exploited

The issue was addressed with improved checks. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

May 13, 2024
KEV Nov 4, 2026
Critical 9.8

CVE-2024-27810

A path handling issue was addressed with improved validation. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Mo…

Apple macOS iOS and iPadOS watchOS macOS iOS

May 13, 2024
Critical 9.8

CVE-2024-27841

The issue was addressed with improved memory handling. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14…

Apple macOS iOS and iPadOS macOS iOS

May 13, 2024
High 8.1

CVE-2024-27796

The issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS …

Apple macOS iOS and iPadOS macOS iOS

May 13, 2024
High 8.1

CVE-2024-27804 Public exploit

The issue was addressed with improved memory handling. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14…

Apple macOS iOS and iPadOS watchOS macOS iOS

May 13, 2024
High 7.8

CVE-2024-27818

The issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 an…

Apple macOS iOS and iPadOS macOS iOS

May 13, 2024
High 7.5

CVE-2024-27821 Public exploit

A path handling issue was addressed with improved validation. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS So…

Apple macOS iOS and iPadOS watchOS macOS iOS

May 13, 2024
High 7.4

CVE-2024-27847

This issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS…

Apple macOS iOS and iPadOS macOS iOS

May 13, 2024
Medium 5.5

CVE-2023-42893

A permissions issue was addressed by removing vulnerable code and adding additional checks. This issue is fixed in macO…

Apple macOS iOS and iPadOS watchOS macOS iOS

Mar 28, 2024
Medium 5.5

CVE-2024-27839

A privacy issue was addressed by moving sensitive data to a more secure location. This issue is fixed in iOS 17.5 and i…

Apple iOS and iPadOS iOS

May 13, 2024
Medium 5.5

CVE-2024-27852

A privacy issue was addressed with improved client ID handling for alternative app marketplaces. This issue is fixed in…

Apple iOS and iPadOS iOS

May 13, 2024
Medium 5.3

CVE-2024-27816

A logic issue was addressed with improved checks. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, t…

Apple macOS iOS and iPadOS watchOS macOS iOS

May 13, 2024
Low 2.4

CVE-2024-27803

A permissions issue was addressed with improved validation. This issue is fixed in iOS 17.5 and iPadOS 17.5. An attacke…

Apple iOS and iPadOS iOS

May 13, 2024
Low 2.4

CVE-2024-27835

This issue was addressed through improved state management. This issue is fixed in iOS 17.5 and iPadOS 17.5. An attacke…

Apple iOS and iPadOS iOS

May 13, 2024

Revision history

2024-05-15 #0
Initiele versie

References

Source - apple
https://support.apple.com/en-us/HT214101