Summary
Apple heeft kwetsbaarheden verholpen in macOS Sequoia 15.2, Ventura 13.7.2, en Sonoma 14.7.2.
Details
Interpretaties
De kwetsbaarheden omvatten onder andere een use-after-free kwetsbaarheid die kon leiden tot onverwachte applicatie-terminatie of willekeurige code-executie, en logica-issues die het mogelijk maakten dat applicaties beschermde delen van het bestandssysteem konden wijzigen. Daarnaast zijn er verbeteringen doorgevoerd in het geheugenbeheer om de stabiliteit en beveiliging van de systemen te waarborgen.
Oplossingen
Apple heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.
Vulnerabilities 46
-
Critical 9.8CVE-2024-45490 Public exploit
An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XML_ParseBuffer.
-
Critical 9.8
This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in iOS 18.2 and …
-
Critical 9.8
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.2. A…
-
High 8.8CVE-2024-54498 Public exploit
A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 1…
-
High 8.8
A type confusion issue was addressed with improved memory handling. This issue is fixed in Safari 18.2, iOS 18.2 and iP…
-
High 8.8
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iP…
-
High 8.4
A logic issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.2. An app may be ab…
-
High 8.2
The issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, macO…
-
High 7.8
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma…
-
High 7.8
A logic issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS…
-
High 7.8
A logic issue was addressed with improved file handling. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2…
-
High 7.8
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.2. A malicious app may …
-
High 7.8
A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS…
-
High 7.5
The issue was addressed with improved checks. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7…
-
High 7.1
The issue was addressed with improved memory handling. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, …
-
High 7.1
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2,…
-
Medium 6.5
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2. …
-
Medium 6.5
This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.…
-
Medium 6.5
An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.2, macOS S…
-
Medium 6.5
The issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Seq…
-
Medium 6.5CVE-2024-54502 EPSS 17%
The issue was addressed with improved checks. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7…
-
Medium 6.5
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iP…
-
Medium 5.9
A race condition was addressed with additional validation. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7…
-
Medium 5.7
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS …
-
Medium 5.5
The issue was addressed with improved memory handling. This issue is fixed in iOS 18.1 and iPadOS 18.1, iPadOS 17.7.3, …
-
Medium 5.5
A configuration issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.2, macOS Sono…
-
Medium 5.5
A logic issue was addressed with improved file handling. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2…
-
Medium 5.5
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ven…
-
Medium 5.5
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ven…
-
Medium 5.5
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ven…
-
Medium 5.5
The issue was resolved by sanitizing logging. This issue is fixed in macOS Sequoia 15.2. An app may be able to access u…
-
Medium 5.5
This issue was addressed by enabling hardened runtime. This issue is fixed in macOS Sequoia 15.2. A local attacker may …
-
Medium 5.5
The issue was resolved by sanitizing logging. This issue is fixed in macOS Sequoia 15.2. A malicious application may be…
-
Medium 5.5
The issue was addressed with improved permissions logic. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2…
-
Medium 5.5
The issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Seq…
-
Medium 5.5
The issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Seq…
-
Medium 5.5
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoi…
-
Medium 5.5
A logic issue was addressed with improved file handling. This issue is fixed in macOS Sequoia 15.2. A malicious app may…
-
Medium 5.5
The issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, macO…
-
Medium 5.5
This issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, mac…
-
Medium 5.5
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.2. An app may be able to…
-
Medium 5.3
A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 1…
-
Medium 5.1
A race condition was addressed with improved locking. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, m…
-
Medium 4.3
The issue was addressed with improved routing of Safari-originated requests. This issue is fixed in Safari 18.2, iOS 18…
-
Low 3.3
This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.2. Privacy indicato…
-
Unscored —
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey…
Revision history
-
#0
Initiele versie
References
-
Reference - cveprojectv5; nvd
https://support.apple.com/en-us/121839
-
Reference - cveprojectv5; nvd
https://support.apple.com/en-us/121840
-
Reference - cveprojectv5; nvd
https://support.apple.com/en-us/121842