Apple

iPadOS

1635 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2024-54479

  • EPSS 1.17%
  • Published 12.12.2024 02:15:29
  • Last modified 20.12.2024 19:15:07

The issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.3, watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, Safari 18.2, iOS 18.2 and iPadOS 18.2. Processing maliciously crafted web content may lead to an unexpected...

2.4

CVE-2024-54485

  • EPSS 0.03%
  • Published 12.12.2024 02:15:29
  • Last modified 13.12.2024 19:15:09

The issue was addressed by adding additional logic. This issue is fixed in iPadOS 17.7.3, iOS 18.2 and iPadOS 18.2. An attacker with physical access to an iOS device may be able to view notification content from the lock screen.

7.1

CVE-2024-44245

  • EPSS 0.04%
  • Published 12.12.2024 02:15:24
  • Last modified 20.12.2024 19:15:07

The issue was addressed with improved memory handling. This issue is fixed in iPadOS 17.7.3, visionOS 2.2, macOS Sequoia 15.2, iOS 18.2 and iPadOS 18.2, macOS Sonoma 14.7.2. An app may be able to cause unexpected system termination or corrupt kernel ...

5.3

CVE-2024-44246

  • EPSS 0.14%
  • Published 12.12.2024 02:15:24
  • Last modified 18.12.2024 18:08:57

The issue was addressed with improved routing of Safari-originated requests. This issue is fixed in macOS Sequoia 15.2, iOS 18.2 and iPadOS 18.2, Safari 18.2, iPadOS 17.7.3. On a device with Private Relay enabled, adding a website to the Safari Readi...

3.3

CVE-2024-44290

  • EPSS 0.03%
  • Published 12.12.2024 02:15:24
  • Last modified 16.12.2024 22:15:06

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.1 and iPadOS 18.1, watchOS 11.1. An app may be able to determine a user’s current location.

9.8

CVE-2024-44299

  • EPSS 0.31%
  • Published 12.12.2024 02:15:24
  • Last modified 13.12.2024 18:47:10

The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.1 and iPadOS 18.1. An attacker may be able to cause unexpected system termination or arbitrary code execution in DCP firmware.

3.3

CVE-2024-44200

  • EPSS 0.03%
  • Published 12.12.2024 02:15:23
  • Last modified 13.12.2024 19:15:08

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.1 and iPadOS 18.1. An app may be able to read sensitive location information.

5.5

CVE-2024-44201

  • EPSS 0.04%
  • Published 12.12.2024 02:15:23
  • Last modified 13.12.2024 19:15:08

The issue was addressed with improved memory handling. This issue is fixed in iPadOS 17.7.3, macOS Ventura 13.7.2, iOS 18.1 and iPadOS 18.1, macOS Sonoma 14.7.2. Processing a malicious crafted file may lead to a denial-of-service.

5.3

CVE-2024-44212

  • EPSS 0.1%
  • Published 12.12.2024 02:15:23
  • Last modified 20.12.2024 19:15:06

A cookie management issue was addressed with improved state management. This issue is fixed in Safari 18.1, visionOS 2.1, tvOS 18.1, iOS 18.1 and iPadOS 18.1, watchOS 11.1. Cookies belonging to one origin may be sent to another origin.

7.8

CVE-2024-44225

  • EPSS 0.06%
  • Published 12.12.2024 02:15:23
  • Last modified 20.12.2024 19:15:06

A logic issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.3, watchOS 11.2, tvOS 18.2, macOS Sequoia 15.2, iOS 18.2 and iPadOS 18.2, macOS Ventura 13.7.2, macOS Sonoma 14.7.2. An app may be able to gain elevated privileges.