Apple

macOS

3178 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.5

CVE-2024-40855

  • EPSS 0.23%
  • Veröffentlicht 28.10.2024 21:15:04
  • Zuletzt bearbeitet 02.04.2026 19:17:58

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7.1, macOS Ventura 13.7.1, visionOS 2. A sandboxed app may be able to access sensitive user data.

5.5

CVE-2024-40810

  • EPSS 0.17%
  • Veröffentlicht 24.10.2024 17:15:16
  • Zuletzt bearbeitet 29.10.2024 21:35:09

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Sonoma 14.6. An app may be able to cause a coprocessor crash.

6.8

CVE-2024-44141

  • EPSS 0.24%
  • Veröffentlicht 24.10.2024 17:15:16
  • Zuletzt bearbeitet 11.12.2024 18:29:33

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.6. A person with physical access to an unlocked Mac may be able to gain root code execution.

5.5

CVE-2024-44185

  • EPSS 0.29%
  • Veröffentlicht 24.10.2024 17:15:16
  • Zuletzt bearbeitet 02.04.2026 19:18:16

The issue was addressed with improved checks. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.3, watchOS 10.6. Processing maliciously crafted web content may lead to an unexpected process crash.

5.5

CVE-2024-44205

  • EPSS 0.19%
  • Veröffentlicht 24.10.2024 17:15:16
  • Zuletzt bearbeitet 02.04.2026 19:18:20

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. A sandboxed app may be ...

9.3

CVE-2024-44206

  • EPSS 0.46%
  • Veröffentlicht 24.10.2024 17:15:16
  • Zuletzt bearbeitet 02.04.2026 19:18:20

An issue in the handling of URL protocols was addressed with improved logic. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.3, watchOS 10.6. A user may be able to bypass some web content restric...

6.5

CVE-2024-44187

  • EPSS 0.64%
  • Veröffentlicht 17.09.2024 00:15:52
  • Zuletzt bearbeitet 02.04.2026 19:18:17

A cross-origin issue existed with "iframe" elements. This was addressed with improved tracking of security origins. This issue is fixed in Safari 18, iOS 18 and iPadOS 18, macOS Sequoia 15, tvOS 18, visionOS 2, watchOS 11. A malicious website may exf...

5.5

CVE-2024-44188

  • EPSS 0.19%
  • Veröffentlicht 17.09.2024 00:15:52
  • Zuletzt bearbeitet 04.11.2025 17:16:13

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. An app may be able to access protected user data.

7.5

CVE-2024-44189

  • EPSS 0.52%
  • Veröffentlicht 17.09.2024 00:15:52
  • Zuletzt bearbeitet 04.11.2025 17:16:13

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15. A logic issue existed where a process may be able to capture screen contents without user consent.

5.5

CVE-2024-44190

  • EPSS 0.25%
  • Veröffentlicht 17.09.2024 00:15:52
  • Zuletzt bearbeitet 02.04.2026 19:18:17

A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. An app may be able to read arbitrary files.