Advisories · Technology

Apple iOS and iPadOS.

Every CVE that names Apple iOS and iPadOS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-44194 CVE record

CVSS 5.5 Medium

This issue was addressed with improved redaction of sensitive information.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 28 Oct 2024
CVE-2024-44252 CVE record

CVSS 7.1 High

A logic issue was addressed with improved file handling.
- Apple iOS and iPadOS
- Apple tvOS
Not analysed yet 28 Oct 2024
CVE-2024-44244 CVE record

CVSS 4.3 Medium

Out-of-bounds write in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 28 Oct 2024
CVE-2024-44229 CVE record

CVSS 5.3 Medium

An information leakage was addressed with additional validation.
- Apple Safari
- Apple iOS and iPadOS
Not analysed yet 28 Oct 2024
CVE-2024-44273 CVE record

CVSS 5.5 Medium

Symlink following in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Path traversal
Not analysed yet 28 Oct 2024
CVE-2024-44269 CVE record

CVSS 5.5 Medium

A logic issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 28 Oct 2024
CVE-2024-44258 CVE record

CVSS 7.1 High

Symlink following in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple tvOS
- Path traversal
Not analysed yet 28 Oct 2024
CVE-2024-44126 CVE record

CVSS 7.8 High

Out-of-bounds write in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 28 Oct 2024
CVE-2024-44235 CVE record

CVSS 4.6 Medium

Improper check for unusual conditions in Apple iOS and iPadOS
- Apple iOS and iPadOS
- CWE-754
Not analysed yet 28 Oct 2024
CVE-2024-44274 CVE record

CVSS 4.6 Medium

The issue was addressed with improved authentication.
- Apple iOS and iPadOS
- Apple watchOS
Not analysed yet 28 Oct 2024
CVE-2024-44254 CVE record

CVSS 5.5 Medium

This issue was addressed with improved redaction of sensitive information.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 28 Oct 2024
CVE-2024-44215 CVE record

CVSS 5.5 Medium

This issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 28 Oct 2024
CVE-2024-44239 CVE record

CVSS 5.5 Medium

Sensitive information in log files in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
Not analysed yet 28 Oct 2024
CVE-2024-44278 CVE record

CVSS 5.5 Medium

An information disclosure issue was addressed with improved private data redaction for log entries.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 28 Oct 2024
CVE-2024-44297 CVE record

CVSS 6.5 Medium

The issue was addressed with improved bounds checks.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 28 Oct 2024
CVE-2024-44296 CVE record

CVSS 5.4 Medium

The issue was addressed with improved checks.
- Apple Safari
- Apple iOS and iPadOS
Not analysed yet 28 Oct 2024
CVE-2024-40851 CVE record

CVSS 2.4 Low

This issue was addressed by restricting options offered on a locked device.
- Apple iOS and iPadOS
Not analysed yet 28 Oct 2024
CVE-2024-44255 CVE record

CVSS 8.4 High

Path traversal in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Path traversal
Not analysed yet 28 Oct 2024
CVE-2024-44263 CVE record

CVSS 4.0 Medium

Insecure storage of sensitive information in Apple iOS and iPadOS
- Apple iOS and iPadOS
- Information disclosure
Not analysed yet 28 Oct 2024
CVE-2024-44218 CVE record

CVSS 7.8 High

Buffer overflow in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 28 Oct 2024
CVE-2024-40867 CVE record

CVSS 8.8 High

A custom URL scheme handling issue was addressed with improved input validation.
- Apple iOS and iPadOS
Not analysed yet 28 Oct 2024
CVE-2024-44259 CVE record

CVSS 8.8 High

This issue was addressed through improved state management.
- Apple Safari
- Apple iOS and iPadOS
Not analysed yet 28 Oct 2024
CVE-2024-44206 CVE record

CVSS 5.4 Medium

An issue in the handling of URL protocols was addressed with improved logic.
- Apple Safari
- Apple iOS and iPadOS
Not analysed yet 24 Oct 2024
CVE-2024-44205 CVE record

CVSS 5.5 Medium

Sensitive information in log files in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
Not analysed yet 24 Oct 2024
CVE-2024-44185 CVE record

CVSS 5.5 Medium

The issue was addressed with improved checks.
- Apple Safari
- Apple iOS and iPadOS
Not analysed yet 24 Oct 2024
CVE-2024-44207 CVE record

CVSS 4.3 Medium

This issue was addressed with improved checks.
- Apple iOS and iPadOS
Not analysed yet 3 Oct 2024
CVE-2024-44204 CVE record

CVSS 5.5 Medium

A logic issue was addressed with improved validation.
- Apple iOS and iPadOS
Not analysed yet 3 Oct 2024
CVE-2024-44165 CVE record

CVSS 7.5 High

A logic issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 16 Sept 2024
CVE-2024-44124 CVE record

CVSS 6.5 Medium

This issue was addressed through improved state management.
- Apple iOS and iPadOS
Not analysed yet 16 Sept 2024
CVE-2024-40844 CVE record

CVSS 5.5 Medium

A privacy issue was addressed with improved handling of temporary files.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 16 Sept 2024
CVE-2024-40852 CVE record

CVSS 7.5 High

Missing authorization in Apple iOS and iPadOS
- Apple iOS and iPadOS
- Broken access control
Not analysed yet 16 Sept 2024
CVE-2024-44169 CVE record

CVSS 8.1 High

Uncontrolled resource consumption in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Denial of service
Not analysed yet 16 Sept 2024
CVE-2024-44191 CVE record

CVSS 5.5 Medium

This issue was addressed through improved state management.
- Apple Xcode
- Apple iOS and iPadOS
Not analysed yet 16 Sept 2024
CVE-2024-44187 CVE record

CVSS 6.5 Medium

Origin validation error in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- CWE-346
Not analysed yet 16 Sept 2024
CVE-2024-44164 CVE record

CVSS 7.1 High

This issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 16 Sept 2024
CVE-2024-44180 CVE record

CVSS 2.4 Low

Information disclosure in Apple iOS and iPadOS
- Apple iOS and iPadOS
- Information disclosure
Not analysed yet 16 Sept 2024
CVE-2024-40863 CVE record

CVSS 5.5 Medium

Information disclosure in Apple iOS and iPadOS
- Apple iOS and iPadOS
- Information disclosure
Not analysed yet 16 Sept 2024
CVE-2024-27876 CVE record

CVSS 8.1 High

Race condition in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Race condition
Not analysed yet 16 Sept 2024
CVE-2024-44158 CVE record

CVSS 5.5 Medium

Information disclosure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
Not analysed yet 16 Sept 2024
CVE-2024-44139 CVE record

CVSS 2.4 Low

Information disclosure in Apple iOS and iPadOS
- Apple iOS and iPadOS
- Information disclosure
Not analysed yet 16 Sept 2024
CVE-2024-40856 CVE record

CVSS 7.5 High

An integrity issue was addressed with Beacon Protection.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 16 Sept 2024
CVE-2024-27879 CVE record

CVSS 7.5 High

Buffer overflow in Apple iOS and iPadOS
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 16 Sept 2024
CVE-2024-27880 CVE record

CVSS 5.5 Medium

Out-of-bounds read in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 16 Sept 2024
CVE-2024-40840 CVE record

CVSS 4.6 Medium

This issue was addressed through improved state management.
- Apple iOS and iPadOS
Not analysed yet 16 Sept 2024
CVE-2024-44198 CVE record

CVSS 5.5 Medium

Integer overflow in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 16 Sept 2024
CVE-2024-27874 CVE record

CVSS 7.5 High

Uncontrolled resource consumption in Apple iOS and iPadOS
- Apple iOS and iPadOS
- Denial of service
Not analysed yet 16 Sept 2024
CVE-2024-44176 CVE record

CVSS 5.5 Medium

Uncontrolled resource consumption in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Denial of service
Not analysed yet 16 Sept 2024
CVE-2024-40791 CVE record

CVSS 3.3 Low

Sensitive information in log files in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
Not analysed yet 16 Sept 2024
CVE-2024-40857 CVE record

CVSS 6.1 Medium

Cross-site scripting in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Cross-site scripting (XSS)
Not analysed yet 16 Sept 2024
CVE-2024-44183 CVE record

CVSS 5.5 Medium

Uncontrolled resource consumption in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Denial of service
Not analysed yet 16 Sept 2024
CVE-2024-44171 CVE record

CVSS 4.6 Medium

This issue was addressed through improved state management.
- Apple iOS and iPadOS
- Apple watchOS
Not analysed yet 16 Sept 2024
CVE-2024-44167 CVE record

CVSS 8.1 High

Path traversal in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Path traversal
Not analysed yet 16 Sept 2024
CVE-2024-44184 CVE record

CVSS 5.5 Medium

Information disclosure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
Not analysed yet 16 Sept 2024
CVE-2024-40850 CVE record

CVSS 5.5 Medium

Information disclosure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
Not analysed yet 16 Sept 2024
CVE-2024-44147 CVE record

CVSS 7.7 High

Improper privilege management in Apple iOS and iPadOS
- Apple iOS and iPadOS
- Privilege escalation
Not analysed yet 16 Sept 2024
CVE-2024-27869 CVE record

CVSS 7.5 High

Path traversal in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Path traversal
Not analysed yet 16 Sept 2024
CVE-2024-44202 CVE record

CVSS 5.3 Medium

Improper authentication in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Authentication bypass
Not analysed yet 16 Sept 2024
CVE-2024-40826 CVE record

CVSS 6.1 Medium

A privacy issue was addressed with improved handling of files.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 16 Sept 2024
CVE-2024-44131 CVE record

CVSS 5.5 Medium

Symlink following in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Path traversal
Not analysed yet 16 Sept 2024
CVE-2024-44127 CVE record

CVSS 5.3 Medium

Improper authentication in Apple iOS and iPadOS
- Apple iOS and iPadOS
- Authentication bypass
Not analysed yet 16 Sept 2024