Apple

macOS

3178 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.8

CVE-2024-27796

  • EPSS 0.26%
  • Veröffentlicht 14.05.2024 15:13:03
  • Zuletzt bearbeitet 02.04.2026 19:17:18

The issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7. An attacker may be able to elevate privileges.

7.8

CVE-2024-27798

  • EPSS 0.21%
  • Veröffentlicht 14.05.2024 15:13:03
  • Zuletzt bearbeitet 02.04.2026 19:17:18

An authorization issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7. An attacker may be able to elevate privileges.

5.5

CVE-2024-27789

  • EPSS 0.62%
  • Veröffentlicht 14.05.2024 15:13:01
  • Zuletzt bearbeitet 02.04.2026 19:17:17

A logic issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, macOS Monterey 12.7.5, macOS Sonoma 14.4, macOS Ventura 13.6.7. An app may be able to access user-sensitive data.

5.5

CVE-2024-23236

  • EPSS 0.26%
  • Veröffentlicht 14.05.2024 14:58:48
  • Zuletzt bearbeitet 02.04.2026 19:17:02

A correctness issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.5. An app may be able to read arbitrary files.

5.5

CVE-2024-23229

  • EPSS 0.28%
  • Veröffentlicht 14.05.2024 14:58:46
  • Zuletzt bearbeitet 02.04.2026 19:17:01

This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Monterey 12.7.5, macOS Sonoma 14.4, macOS Ventura 13.6.5. A malicious application may be able to access Find My data.

9.6

CVE-2024-4558

Exploit
  • EPSS 1.53%
  • Veröffentlicht 07.05.2024 19:15:08
  • Zuletzt bearbeitet 04.11.2025 18:16:42

Use after free in ANGLE in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

6.5

CVE-2024-23271

  • EPSS 0.81%
  • Veröffentlicht 24.04.2024 17:15:47
  • Zuletzt bearbeitet 02.04.2026 19:17:10

A logic issue was addressed with improved checks. This issue is fixed in Safari 17.3, iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, tvOS 17.3, watchOS 10.3. A malicious website may cause unexpected cross-origin behavior.

7.1

CVE-2024-27791

  • EPSS 0.21%
  • Veröffentlicht 24.04.2024 17:15:47
  • Zuletzt bearbeitet 02.04.2026 19:17:17

The issue was addressed with improved checks. This issue is fixed in iOS 16.7.5 and iPadOS 16.7.5, iOS 17.3 and iPadOS 17.3, macOS Monterey 12.7.3, macOS Sonoma 14.3, macOS Ventura 13.6.4, tvOS 17.3. An app may be able to corrupt coprocessor memory.

7.3

CVE-2023-38709

  • EPSS 3.91%
  • Veröffentlicht 04.04.2024 20:15:08
  • Zuletzt bearbeitet 04.11.2025 22:15:53

Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses. This issue affects Apache HTTP Server: through 2.4.58.

6.3

CVE-2024-24795

  • EPSS 2.87%
  • Veröffentlicht 04.04.2024 20:15:08
  • Zuletzt bearbeitet 30.06.2025 12:55:47

HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack. Users are recommended to upgrade to version 2.4.59, ...