CVE-2024-27791
- EPSS 0.02%
- Veröffentlicht 24.04.2024 17:15:47
- Zuletzt bearbeitet 04.11.2025 19:17:03
The issue was addressed with improved checks. This issue is fixed in iOS 17.3 and iPadOS 17.3, tvOS 17.3, macOS Ventura 13.6.4, iOS 16.7.5 and iPadOS 16.7.5, macOS Monterey 12.7.3, macOS Sonoma 14.3. An app may be able to corrupt coprocessor memory.
CVE-2023-38709
- EPSS 3.26%
- Veröffentlicht 04.04.2024 20:15:08
- Zuletzt bearbeitet 04.11.2025 22:15:53
Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses. This issue affects Apache HTTP Server: through 2.4.58.
CVE-2024-24795
- EPSS 1.12%
- Veröffentlicht 04.04.2024 20:15:08
- Zuletzt bearbeitet 30.06.2025 12:55:47
HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack. Users are recommended to upgrade to version 2.4.59, ...
CVE-2023-42913
- EPSS 0.28%
- Veröffentlicht 28.03.2024 16:15:08
- Zuletzt bearbeitet 04.11.2025 20:16:56
This issue was addressed through improved state management. This issue is fixed in macOS Sonoma 14.2. Remote Login sessions may be able to obtain full disk access permissions.
CVE-2023-42930
- EPSS 0.03%
- Veröffentlicht 28.03.2024 16:15:08
- Zuletzt bearbeitet 04.11.2025 20:17:04
This issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.6.3, macOS Sonoma 14.2, macOS Monterey 12.7.2. An app may be able to modify protected parts of the file system.
CVE-2023-42931
- EPSS 2.16%
- Veröffentlicht 28.03.2024 16:15:08
- Zuletzt bearbeitet 04.11.2025 20:17:04
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.6.3, macOS Sonoma 14.2, macOS Monterey 12.7.2. A process may gain admin privileges without proper authentication.
CVE-2023-42936
- EPSS 0.04%
- Veröffentlicht 28.03.2024 16:15:08
- Zuletzt bearbeitet 04.11.2025 20:17:05
This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Monterey 12.7.2, macOS Ventura 13.6.3, iOS 17.2 and iPadOS 17.2, tvOS 17.2, watchOS 10.2, macOS Sonoma 14.2. An app may be able to access user-sen...
CVE-2023-42947
- EPSS 0.04%
- Veröffentlicht 28.03.2024 16:15:08
- Zuletzt bearbeitet 04.11.2025 20:17:05
A path handling issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.7.2, macOS Ventura 13.6.3, iOS 17.2 and iPadOS 17.2, tvOS 17.2, watchOS 10.2, macOS Sonoma 14.2. An app may be able to break out of its sandbox.
CVE-2023-42950
- EPSS 0.7%
- Veröffentlicht 28.03.2024 16:15:08
- Zuletzt bearbeitet 03.11.2025 22:16:27
A use after free issue was addressed with improved memory management. This issue is fixed in Safari 17.2, iOS 17.2 and iPadOS 17.2, tvOS 17.2, watchOS 10.2, macOS Sonoma 14.2. Processing maliciously crafted web content may lead to arbitrary code exec...
CVE-2023-42956
- EPSS 0.3%
- Veröffentlicht 28.03.2024 16:15:08
- Zuletzt bearbeitet 21.11.2024 08:23:36
The issue was addressed with improved memory handling. This issue is fixed in Safari 17.2, iOS 17.2 and iPadOS 17.2, macOS Sonoma 14.2. Processing web content may lead to a denial-of-service.