Apple iOS Schwachstellen (CVE)

Für Apple iOS veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

507 Ergebnisse
5.3Mittel
CVE-2024-44229
Apple Safari; Apple iOS and iPadOS; Apple macOS; Apple visionOS

An information leakage was addressed with additional validation. This issue is fixed in Safari 18.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, visionOS 2.1. Private browsing may leak some browsing history.

7.8Hoch
CVE-2024-44218
Apple iOS and iPadOS; Apple macOS; apple macos; apple ios

This issue was addressed with improved checks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS Sonoma 14.7.1. Processing a maliciously crafted file may lead to heap corruption.

8.8Hoch
CVE-2024-40867
Apple iOS and iPadOS; apple ios; apple ipados

A custom URL scheme handling issue was addressed with improved input validation. This issue is fixed in iOS 18.1 and iPadOS 18.1. A remote attacker may be able to break out of Web Content sandbox.

8.8Hoch
CVE-2024-44259
Apple Safari; Apple iOS and iPadOS; Apple macOS; Apple visionOS

This issue was addressed through improved state management. This issue is fixed in Safari 18.1, iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, visionOS 2.1. An attacker may be able to misuse a trust relationship to download malici…

1.0%EPSS
7.7Hoch
CVE-2024-40805
Apple iOS and iPadOS; Apple macOS; Apple tvOS; Apple watchOS

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, watchOS 10.6. An app may be able to bypass Privacy preferences.

9.8Kritisch
CVE-2024-40782
Apple Safari; Apple iOS and iPadOS; Apple macOS; Apple tvOS

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 17.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.3, watchOS 10.6. Processing maliciously crafted web cont…

7.5Hoch
CVE-2024-40829
Apple iOS and iPadOS; Apple macOS; Apple watchOS; apple macos

The issue was addressed with improved checks. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Ventura 13.6.8, watchOS 10.6. An attacker may be able to view restricted content from the lock screen.

7.8Hoch
CVE-2023-40396
Apple iOS and iPadOS; Apple tvOS; Apple macOS; Apple watchOS

The issue was addressed with improved memory handling. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14, watchOS 10, tvOS 17. An app may be able to execute arbitrary code with kernel privileges.

9.1Kritisch
CVE-2024-27811
Apple iOS and iPadOS; Apple macOS; Apple tvOS; Apple visionOS

The issue was addressed with improved checks. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2, watchOS 10.5. An app may be able to elevate privileges.

7.1Hoch
CVE-2024-27857
Apple iOS and iPadOS; Apple macOS; Apple tvOS; Apple visionOS

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2. A remote attacker may be able to cause unexpected app termination or arbitrary code execution.

1.8%EPSS
7.1Hoch
CVE-2024-27800
Apple iOS and iPadOS; Apple macOS; Apple tvOS; Apple visionOS

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7, tvOS 17.5, visionOS 1.2, watchOS 10.5. Processing a malici…

4.6Mittel
CVE-2024-23251
Apple iOS and iPadOS; Apple macOS; Apple watchOS; apple ios

An authentication issue was addressed with improved state management. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, watchOS 10.5. An attacker with physical access may be able to leak Mail account credentials.

5.9Mittel
CVE-2024-27815
Apple iOS and iPadOS; Apple macOS; Apple tvOS; Apple visionOS

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2, watchOS 10.5. An app may be able to execute arbitrary code with kernel privileges.

2.0%EPSS
9.1Kritisch
CVE-2024-27832
Apple iOS and iPadOS; Apple macOS; Apple tvOS; Apple visionOS

The issue was addressed with improved checks. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2, watchOS 10.5. An app may be able to elevate privileges.

5.5Mittel
CVE-2024-27805
Apple iOS and iPadOS; Apple macOS; Apple tvOS; Apple watchOS

An issue was addressed with improved validation of environment variables. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7, tvOS 17.5, watchOS 10.5. An app may be abl…

9.8Kritisch
CVE-2024-27810
Apple iOS and iPadOS; Apple macOS; Apple tvOS; Apple watchOS

A path handling issue was addressed with improved validation. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7, tvOS 17.5, watchOS 10.5. An app may be able to read sensitive location information.

7.5Hoch
CVE-2024-27821
Apple iOS and iPadOS; Apple macOS; Apple watchOS; apple macos

A path handling issue was addressed with improved validation. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, watchOS 10.5. A shortcut may output sensitive user data without consent.

7.8Hoch
CVE-2024-27818
Apple iOS and iPadOS; Apple macOS; apple ios; apple ipados

The issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5. An attacker may be able to cause unexpected app termination or arbitrary code execution.

4.3Mittel
CVE-2024-23228
Apple iOS and iPadOS; apple ipados; apple ios

This issue was addressed through improved state management. This issue is fixed in iOS 17.3 and iPadOS 17.3. Locked Notes content may have been unexpectedly unlocked.

7.3Hoch
CVE-2024-23271
Apple Safari; Apple iOS and iPadOS; Apple macOS; Apple tvOS

A logic issue was addressed with improved checks. This issue is fixed in Safari 17.3, iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, tvOS 17.3, watchOS 10.3. A malicious website may cause unexpected cross-origin behavior.

9.1Kritisch
CVE-2024-23255
Apple iOS and iPadOS; Apple macOS; apple macos; apple ios

An authentication issue was addressed with improved state management. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4. Photos in the Hidden Photos Album may be viewed without authentication.

7.5Hoch
CVE-2024-23280
Apple Safari; Apple iOS and iPadOS; Apple macOS; Apple tvOS

An injection issue was addressed with improved validation. This issue is fixed in Safari 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS 10.4. A maliciously crafted webpage may be able to fingerprint the user.

1.3%EPSS
8.1Hoch
CVE-2024-23235
Apple iOS and iPadOS; Apple macOS; Apple tvOS; Apple visionOS

A race condition was addressed with additional validation. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, watchOS 10.4. An app may be able to access user-sensitive data.

9.8Kritisch
CVE-2024-23265
Apple iOS and iPadOS; Apple macOS; Apple tvOS; Apple visionOS

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5, tvOS 17.4, visionOS 1.1, watchOS 10.4. An app…

7.5Hoch
CVE-2024-23291
Apple iOS and iPadOS; Apple macOS; Apple tvOS; Apple watchOS

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS 10.4. A malicious app may be able to observe user data in log entries related to accessi…