Advisories · Technology

Apple watchOS.

Every CVE that names Apple watchOS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-44273 CVE record

CVSS 5.5 Medium

Symlink following in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Path traversal
Not analysed yet 28 Oct 2024
CVE-2024-44269 CVE record

CVSS 5.5 Medium

A logic issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 28 Oct 2024
CVE-2024-44274 CVE record

CVSS 4.6 Medium

The issue was addressed with improved authentication.
- Apple iOS and iPadOS
- Apple watchOS
Not analysed yet 28 Oct 2024
CVE-2024-44254 CVE record

CVSS 5.5 Medium

This issue was addressed with improved redaction of sensitive information.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 28 Oct 2024
CVE-2024-44215 CVE record

CVSS 5.5 Medium

This issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 28 Oct 2024
CVE-2024-44239 CVE record

CVSS 5.5 Medium

Sensitive information in log files in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
Not analysed yet 28 Oct 2024
CVE-2024-44278 CVE record

CVSS 5.5 Medium

An information disclosure issue was addressed with improved private data redaction for log entries.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 28 Oct 2024
CVE-2024-44297 CVE record

CVSS 6.5 Medium

The issue was addressed with improved bounds checks.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 28 Oct 2024
CVE-2024-44296 CVE record

CVSS 5.4 Medium

The issue was addressed with improved checks.
- Apple Safari
- Apple iOS and iPadOS
Not analysed yet 28 Oct 2024
CVE-2024-44255 CVE record

CVSS 8.4 High

Path traversal in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Path traversal
Not analysed yet 28 Oct 2024
CVE-2024-44206 CVE record

CVSS 5.4 Medium

An issue in the handling of URL protocols was addressed with improved logic.
- Apple Safari
- Apple iOS and iPadOS
Not analysed yet 24 Oct 2024
CVE-2024-44185 CVE record

CVSS 5.5 Medium

The issue was addressed with improved checks.
- Apple Safari
- Apple iOS and iPadOS
Not analysed yet 24 Oct 2024
CVE-2024-44169 CVE record

CVSS 8.1 High

Uncontrolled resource consumption in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Denial of service
Not analysed yet 16 Sept 2024
CVE-2024-44191 CVE record

CVSS 5.5 Medium

This issue was addressed through improved state management.
- Apple Xcode
- Apple iOS and iPadOS
Not analysed yet 16 Sept 2024
CVE-2024-44187 CVE record

CVSS 6.5 Medium

Origin validation error in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- CWE-346
Not analysed yet 16 Sept 2024
CVE-2024-27880 CVE record

CVSS 5.5 Medium

Out-of-bounds read in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 16 Sept 2024
CVE-2024-44198 CVE record

CVSS 5.5 Medium

Integer overflow in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 16 Sept 2024
CVE-2024-44176 CVE record

CVSS 5.5 Medium

Uncontrolled resource consumption in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Denial of service
Not analysed yet 16 Sept 2024
CVE-2024-40857 CVE record

CVSS 6.1 Medium

Cross-site scripting in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Cross-site scripting (XSS)
Not analysed yet 16 Sept 2024
CVE-2024-44183 CVE record

CVSS 5.5 Medium

Uncontrolled resource consumption in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Denial of service
Not analysed yet 16 Sept 2024
CVE-2024-44171 CVE record

CVSS 4.6 Medium

This issue was addressed through improved state management.
- Apple iOS and iPadOS
- Apple watchOS
Not analysed yet 16 Sept 2024
CVE-2024-40850 CVE record

CVSS 5.5 Medium

Information disclosure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
Not analysed yet 16 Sept 2024
CVE-2024-44170 CVE record

CVSS 5.5 Medium

A privacy issue was addressed by moving sensitive data to a more secure location.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 16 Sept 2024
CVE-2024-40777 CVE record

CVSS 3.3 Low

Out-of-bounds read in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 29 Jul 2024
CVE-2024-40809 CVE record

CVSS 7.8 High

A logic issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 29 Jul 2024
CVE-2024-27826 CVE record

CVSS 7.8 High

Improper privilege management in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Privilege escalation
Not analysed yet 29 Jul 2024
CVE-2024-27884 CVE record

CVSS 5.5 Medium

Information disclosure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
Not analysed yet 29 Jul 2024
CVE-2024-40813 CVE record

CVSS 4.6 Medium

Insecure storage of sensitive information in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple watchOS
- Information disclosure
Not analysed yet 29 Jul 2024
CVE-2024-40805 CVE record

CVSS 7.7 High

A permissions issue was addressed with additional restrictions.
- Apple iOS and iPadOS
- Apple macOS
- CWE-281
Not analysed yet 29 Jul 2024
CVE-2024-40782 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Use after free in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 29 Jul 2024
CVE-2024-40829 CVE record

CVSS 7.5 High

Use after free in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 29 Jul 2024
CVE-2024-40812 CVE record

CVSS 7.8 High

Improper access control in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Broken access control
Not analysed yet 29 Jul 2024
CVE-2024-40795 CVE record

CVSS 3.3 Low

This issue was addressed with improved data protection.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 29 Jul 2024
CVE-2024-40824 CVE record

CVSS 7.7 High

This issue was addressed through improved state management.
- Apple iOS and iPadOS
- Apple macOS
- CWE-281
Not analysed yet 29 Jul 2024
CVE-2024-40776 CVE record

CVSS 6.5 Medium

Use after free in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 29 Jul 2024
CVE-2024-40799 CVE record

CVSS 7.1 High

Out-of-bounds read in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 29 Jul 2024
CVE-2024-40815 CVE record

CVSS 7.5 High

Cross-site request forgery in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Cross-site request forgery (CSRF)
Not analysed yet 29 Jul 2024
CVE-2024-40784 CVE record

CVSS 7.8 High

Integer overflow in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 29 Jul 2024
CVE-2024-40788 CVE record

CVSS 6.2 Medium

Type confusion in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 29 Jul 2024
CVE-2024-40835 CVE record

CVSS 5.5 Medium

A logic issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 29 Jul 2024
CVE-2024-40822 CVE record

CVSS 2.4 Low

Improper access control in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Broken access control
Not analysed yet 29 Jul 2024
CVE-2024-40789 CVE record

CVSS 6.5 Medium

Out-of-bounds read in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 29 Jul 2024
CVE-2024-40818 CVE record

CVSS 4.6 Medium

This issue was addressed by restricting options offered on a locked device.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 29 Jul 2024
CVE-2024-40785 CVE record

CVSS 6.1 Medium

Cross-site scripting in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Cross-site scripting (XSS)
Not analysed yet 29 Jul 2024
CVE-2024-40793 CVE record

CVSS 5.5 Medium

Information disclosure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
Not analysed yet 29 Jul 2024
CVE-2024-27863 CVE record

CVSS 5.5 Medium

An information disclosure issue was addressed with improved private data redaction for log entries.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 29 Jul 2024
CVE-2024-27823 CVE record

CVSS 5.9 Medium

Race condition in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Race condition
Not analysed yet 29 Jul 2024
CVE-2024-40836 CVE record

CVSS 7.5 High

Information disclosure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
Not analysed yet 29 Jul 2024
CVE-2024-40787 CVE record

CVSS 7.1 High

This issue was addressed by adding an additional prompt for user consent.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 29 Jul 2024
CVE-2024-40780 CVE record

CVSS 6.5 Medium

Out-of-bounds read in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 29 Jul 2024
CVE-2024-40779 CVE record

CVSS 5.5 Medium

Out-of-bounds read in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 29 Jul 2024
CVE-2024-40806 CVE record

CVSS 5.5 Medium

Out-of-bounds read in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 29 Jul 2024
CVE-2024-40774 CVE record

CVSS 5.9 Medium

A downgrade issue was addressed with additional code-signing restrictions.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 29 Jul 2024
CVE-2023-42957 CVE record

CVSS 3.3 Low

Improper access control in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Broken access control
Not analysed yet 29 Jul 2024
CVE-2023-42949 CVE record

CVSS 3.3 Low

This issue was addressed with improved data protection.
- Apple iOS and iPadOS
- Apple tvOS
Not analysed yet 29 Jul 2024
CVE-2023-40396 CVE record

CVSS 7.8 High

Command injection in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple tvOS
- Command injection
Not analysed yet 29 Jul 2024
CVE-2024-27830 CVE record

CVSS 6.5 Medium

This issue was addressed through improved state management.
- Apple Safari
- Apple iOS and iPadOS
Not analysed yet 10 Jun 2024
CVE-2024-27851 CVE record

CVSS 7.5 High

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 10 Jun 2024
CVE-2024-27806 CVE record

CVSS 5.5 Medium

Information disclosure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
Not analysed yet 10 Jun 2024
CVE-2024-27811 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Improper privilege management in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Privilege escalation
Not analysed yet 10 Jun 2024