High WID-SEC-2024-1726 11 CVEs

Apple Safari: Mehrere Schwachstellen

Published Jul 29, 2024 · Updated Oct 15, 2024 · Revision 2 · de-DE

Vendor: Apple Product: Safari Platform: iOS Platform: macOS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apple Safari ausnutzen, um einen Denial of Service Angriff durchzuführen, den Benutzer zu täuschen, einen Cross-Site-Scripting-Angriff zu starten und vertrauliche Informationen preiszugeben.

Product

Safari ist der auf Apple Geräten eingesetzte Web Browser.

Vulnerabilities 11

Critical 9.8

CVE-2024-40782

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 17.6, iOS 16.7.9 an…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jul 29, 2024
High 7.5

CVE-2024-4558

Use after free in ANGLE in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap …

Google Chrome chromium chromium Browsers Debian Ubuntu Alpine Wolfi

May 7, 2024
Medium 6.5

CVE-2024-40776

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 17.6, iOS 16.7.9 an…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jul 29, 2024
Medium 6.5

CVE-2024-40780

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 17.6, iOS 16.7.9 and i…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jul 29, 2024
Medium 6.5

CVE-2024-40789

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 17.6, iOS 16.7…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jul 29, 2024
Medium 6.1

CVE-2024-40785

This issue was addressed with improved checks. This issue is fixed in Safari 17.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jul 29, 2024
Medium 6.1

CVE-2024-40817

The issue was addressed with improved UI handling. This issue is fixed in Safari 17.6, macOS Monterey 12.7.6, macOS Son…

Apple macOS Safari macOS Browsers

Jul 29, 2024
Medium 5.5

CVE-2024-40779

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 17.6, iOS 16.7.9 and i…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jul 29, 2024
Medium 5.5

CVE-2024-44185

The issue was addressed with improved checks. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonom…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Oct 24, 2024
Medium 5.4

CVE-2024-44206

An issue in the handling of URL protocols was addressed with improved logic. This issue is fixed in Safari 17.6, iOS 17…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers

Oct 24, 2024
Medium 5.3

CVE-2024-40794

This issue was addressed through improved state management. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.…

Apple macOS iOS and iPadOS Safari macOS iOS Browsers Debian Ubuntu

Jul 29, 2024

Revision history

2024-10-15 #2
CVE's ergänzt
2024-07-29 #1
Initiale Fassung

References

Apple security Update vom 2024-07-29
https://support.apple.com/en-us/HT214121