Apple

macOS

2451 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.6

CVE-2024-2398

Exploit
  • EPSS 1.96%
  • Veröffentlicht 27.03.2024 08:15:41
  • Zuletzt bearbeitet 30.07.2025 19:42:27

When an application tells libcurl it wants to allow HTTP/2 server push, and the amount of received headers for the push surpasses the maximum allowed limit (1000), libcurl aborts the server push. When aborting, libcurl inadvertently does not free all...

6.5

CVE-2024-2466

Exploit
  • EPSS 0.15%
  • Veröffentlicht 27.03.2024 08:15:41
  • Zuletzt bearbeitet 30.07.2025 19:42:21

libcurl did not check the server certificate of TLS connections done to a host specified as an IP address, when built to use mbedTLS. libcurl would wrongly avoid using the set hostname function when the specified hostname was given as an IP address,...

5.5

CVE-2024-23287

  • EPSS 0.14%
  • Veröffentlicht 08.03.2024 02:15:50
  • Zuletzt bearbeitet 04.11.2025 19:16:50

A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Sonoma 14.4, iOS 17.4 and iPadOS 17.4, watchOS 10.4. An app may be able to access user-sensitive data.

7.8

CVE-2024-23288

  • EPSS 0.04%
  • Veröffentlicht 08.03.2024 02:15:50
  • Zuletzt bearbeitet 04.11.2025 19:16:50

This issue was addressed by removing the vulnerable code. This issue is fixed in tvOS 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, watchOS 10.4. An app may be able to elevate privileges.

3.3

CVE-2024-23289

  • EPSS 0.04%
  • Veröffentlicht 08.03.2024 02:15:50
  • Zuletzt bearbeitet 04.11.2025 19:16:51

A lock screen issue was addressed with improved state management. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, watchOS 10.4. A person with physical access to a device may be able to use Siri to acc...

5.5

CVE-2024-23290

  • EPSS 0.03%
  • Veröffentlicht 08.03.2024 02:15:50
  • Zuletzt bearbeitet 04.11.2025 19:16:51

A logic issue was addressed with improved restrictions. This issue is fixed in tvOS 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, watchOS 10.4. An app may be able to access user-sensitive data.

3.3

CVE-2024-23291

  • EPSS 0.2%
  • Veröffentlicht 08.03.2024 02:15:50
  • Zuletzt bearbeitet 04.11.2025 19:16:51

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in tvOS 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, watchOS 10.4. A malicious app may be able to observe user data in log entries related t...

3.3

CVE-2024-23292

  • EPSS 0.08%
  • Veröffentlicht 08.03.2024 02:15:50
  • Zuletzt bearbeitet 04.11.2025 19:16:52

This issue was addressed with improved data protection. This issue is fixed in macOS Sonoma 14.4, iOS 17.4 and iPadOS 17.4. An app may be able to access information about a user's contacts.

4.6

CVE-2024-23293

  • EPSS 0.14%
  • Veröffentlicht 08.03.2024 02:15:50
  • Zuletzt bearbeitet 04.11.2025 19:16:52

This issue was addressed through improved state management. This issue is fixed in tvOS 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, watchOS 10.4. An attacker with physical access may be able to use Siri to access sensitive user data.

7.8

CVE-2024-23294

  • EPSS 0.25%
  • Veröffentlicht 08.03.2024 02:15:50
  • Zuletzt bearbeitet 04.11.2025 19:16:52

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14.4. Processing malicious input may lead to code execution.