Apple

iPadOS

1635 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2024-54479

  • EPSS 1.17%
  • Veröffentlicht 12.12.2024 02:15:29
  • Zuletzt bearbeitet 20.12.2024 19:15:07

The issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.3, watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, Safari 18.2, iOS 18.2 and iPadOS 18.2. Processing maliciously crafted web content may lead to an unexpected...

2.4

CVE-2024-54485

  • EPSS 0.03%
  • Veröffentlicht 12.12.2024 02:15:29
  • Zuletzt bearbeitet 13.12.2024 19:15:09

The issue was addressed by adding additional logic. This issue is fixed in iPadOS 17.7.3, iOS 18.2 and iPadOS 18.2. An attacker with physical access to an iOS device may be able to view notification content from the lock screen.

7.1

CVE-2024-44245

  • EPSS 0.04%
  • Veröffentlicht 12.12.2024 02:15:24
  • Zuletzt bearbeitet 20.12.2024 19:15:07

The issue was addressed with improved memory handling. This issue is fixed in iPadOS 17.7.3, visionOS 2.2, macOS Sequoia 15.2, iOS 18.2 and iPadOS 18.2, macOS Sonoma 14.7.2. An app may be able to cause unexpected system termination or corrupt kernel ...

5.3

CVE-2024-44246

  • EPSS 0.14%
  • Veröffentlicht 12.12.2024 02:15:24
  • Zuletzt bearbeitet 18.12.2024 18:08:57

The issue was addressed with improved routing of Safari-originated requests. This issue is fixed in macOS Sequoia 15.2, iOS 18.2 and iPadOS 18.2, Safari 18.2, iPadOS 17.7.3. On a device with Private Relay enabled, adding a website to the Safari Readi...

3.3

CVE-2024-44290

  • EPSS 0.03%
  • Veröffentlicht 12.12.2024 02:15:24
  • Zuletzt bearbeitet 16.12.2024 22:15:06

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.1 and iPadOS 18.1, watchOS 11.1. An app may be able to determine a user’s current location.

9.8

CVE-2024-44299

  • EPSS 0.31%
  • Veröffentlicht 12.12.2024 02:15:24
  • Zuletzt bearbeitet 13.12.2024 18:47:10

The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.1 and iPadOS 18.1. An attacker may be able to cause unexpected system termination or arbitrary code execution in DCP firmware.

3.3

CVE-2024-44200

  • EPSS 0.03%
  • Veröffentlicht 12.12.2024 02:15:23
  • Zuletzt bearbeitet 13.12.2024 19:15:08

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.1 and iPadOS 18.1. An app may be able to read sensitive location information.

5.5

CVE-2024-44201

  • EPSS 0.04%
  • Veröffentlicht 12.12.2024 02:15:23
  • Zuletzt bearbeitet 13.12.2024 19:15:08

The issue was addressed with improved memory handling. This issue is fixed in iPadOS 17.7.3, macOS Ventura 13.7.2, iOS 18.1 and iPadOS 18.1, macOS Sonoma 14.7.2. Processing a malicious crafted file may lead to a denial-of-service.

5.3

CVE-2024-44212

  • EPSS 0.1%
  • Veröffentlicht 12.12.2024 02:15:23
  • Zuletzt bearbeitet 20.12.2024 19:15:06

A cookie management issue was addressed with improved state management. This issue is fixed in Safari 18.1, visionOS 2.1, tvOS 18.1, iOS 18.1 and iPadOS 18.1, watchOS 11.1. Cookies belonging to one origin may be sent to another origin.

7.8

CVE-2024-44225

  • EPSS 0.06%
  • Veröffentlicht 12.12.2024 02:15:23
  • Zuletzt bearbeitet 20.12.2024 19:15:06

A logic issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.3, watchOS 11.2, tvOS 18.2, macOS Sequoia 15.2, iOS 18.2 and iPadOS 18.2, macOS Ventura 13.7.2, macOS Sonoma 14.7.2. An app may be able to gain elevated privileges.