CVE-2024-44126
- EPSS 0.03%
- Veröffentlicht 28.10.2024 21:15:05
- Zuletzt bearbeitet 02.04.2026 19:18:01
The issue was addressed with improved checks. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7.1, visionOS 2. Processing a maliciously crafted file may lead to heap corrupt...
CVE-2024-44144
- EPSS 0.03%
- Veröffentlicht 28.10.2024 21:15:05
- Zuletzt bearbeitet 02.04.2026 19:18:05
A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7.1, tvOS 18, visionOS 2, watchOS 11. Processing a maliciously crafted file ma...
CVE-2024-44155
- EPSS 0.13%
- Veröffentlicht 28.10.2024 21:15:05
- Zuletzt bearbeitet 02.04.2026 19:18:06
A custom URL scheme handling issue was addressed with improved input validation. This issue is fixed in Safari 18, iOS 17.7.1 and iPadOS 17.7.1, iOS 18 and iPadOS 18, macOS Sequoia 15, watchOS 11. Maliciously crafted web content may violate iframe sa...
CVE-2024-44194
- EPSS 0.02%
- Veröffentlicht 28.10.2024 21:15:05
- Zuletzt bearbeitet 02.04.2026 19:18:18
This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, visionOS 2.1, watchOS 11.1. An app may be able to access sensitive user data.
CVE-2024-40851
- EPSS 0.17%
- Veröffentlicht 28.10.2024 21:15:04
- Zuletzt bearbeitet 03.11.2025 22:17:10
This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 18.1 and iPadOS 18.1. An attacker with physical access may be able to access contact photos from the lock screen.
CVE-2024-40853
- EPSS 0.17%
- Veröffentlicht 28.10.2024 21:15:04
- Zuletzt bearbeitet 30.10.2024 17:08:42
This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 18 and iPadOS 18. An attacker may be able to use Siri to enable Auto-Answer Calls.
CVE-2024-40867
- EPSS 1.6%
- Veröffentlicht 28.10.2024 21:15:04
- Zuletzt bearbeitet 03.11.2025 22:17:11
A custom URL scheme handling issue was addressed with improved input validation. This issue is fixed in iOS 18.1 and iPadOS 18.1. A remote attacker may be able to break out of Web Content sandbox.
CVE-2024-44185
- EPSS 0.04%
- Veröffentlicht 24.10.2024 17:15:16
- Zuletzt bearbeitet 02.04.2026 19:18:16
The issue was addressed with improved checks. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.3, watchOS 10.6. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2024-44205
- EPSS 0.1%
- Veröffentlicht 24.10.2024 17:15:16
- Zuletzt bearbeitet 02.04.2026 19:18:20
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. A sandboxed app may be ...
CVE-2024-44206
- EPSS 0.54%
- Veröffentlicht 24.10.2024 17:15:16
- Zuletzt bearbeitet 02.04.2026 19:18:20
An issue in the handling of URL protocols was addressed with improved logic. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.3, watchOS 10.6. A user may be able to bypass some web content restric...