Skip to content
OpenAdvisories
Medium WID-SEC-2024-2156 4 CVEs

Apple Xcode: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen

Published Sep 16, 2024 · Updated Oct 28, 2024 · Revision 2 · de-DE

Vendor: Apple Product: Xcode Platform: macOS

Summary

Ein Angreifer kann mehrere Schwachstellen in Apple Xcode ausnutzen, um Informationen offenzulegen.

Product

Xcode ist eine integrierte Entwicklungsumgebung von Apple, mit der man Programme für Mac OS X und iOS schreiben kann. Das Programm ist nur für Mac OS X verfügbar.

Vulnerabilities 4

  • High 7.8
    CVE-2024-44162

    This issue was addressed by enabling hardened runtime. This issue is fixed in Xcode 16. A malicious application may gai…

    Apple Xcode
  • High 7.5
    CVE-2024-40862

    A privacy issue was addressed by removing sensitive data. This issue is fixed in Xcode 16. An attacker may be able to d…

    Apple Xcode
  • High 7.5
    CVE-2024-44228

    This issue was addressed with improved permissions checking. This issue is fixed in Xcode 16. An app may be able to inh…

    Apple Xcode
  • Medium 5.5
    CVE-2024-44191

    This issue was addressed through improved state management. This issue is fixed in Xcode 16, iOS 17.7 and iPadOS 17.7, …

    Apple macOS iOS and iPadOS watchOS macOS iOS

Revision history

  1. #2

    CVE ergänzt

  2. #1

    Initiale Fassung

References