Vulnerability-Lookup

CVE-2024-40788 (GCVE-0-2024-40788)

Vulnerability from cvelistv5 – Published: 2024-07-29 22:17 – Updated: 2026-04-02 18:20

Summary

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8, tvOS 17.6, visionOS 1.3, watchOS 10.6. A local attacker may be able to cause unexpected system shutdown.

Severity

6.2 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

A local attacker may be able to cause unexpected system shutdown
CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')

Assigner

apple

References

31 references

URL	Tags
https://support.apple.com/en-us/120908
https://support.apple.com/en-us/120909
https://support.apple.com/en-us/120910
https://support.apple.com/en-us/120911
https://support.apple.com/en-us/120912
https://support.apple.com/en-us/120914
https://support.apple.com/en-us/120915
https://support.apple.com/en-us/120916
https://support.apple.com/en-us/HT214117	x_transferred
https://support.apple.com/en-us/HT214116	x_transferred
https://support.apple.com/en-us/HT214120	x_transferred
https://support.apple.com/en-us/HT214124	x_transferred
https://support.apple.com/en-us/HT214119	x_transferred
https://support.apple.com/en-us/HT214123	x_transferred
https://support.apple.com/en-us/HT214122	x_transferred
https://support.apple.com/en-us/HT214118	x_transferred
http://seclists.org/fulldisclosure/2024/Jul/16	x_transferred
http://seclists.org/fulldisclosure/2024/Jul/23	x_transferred
http://seclists.org/fulldisclosure/2024/Jul/21	x_transferred
http://seclists.org/fulldisclosure/2024/Jul/20	x_transferred
http://seclists.org/fulldisclosure/2024/Jul/17	x_transferred
http://seclists.org/fulldisclosure/2024/Jul/22	x_transferred
http://seclists.org/fulldisclosure/2024/Jul/18	x_transferred
http://seclists.org/fulldisclosure/2024/Jul/19	x_transferred
https://support.apple.com/kb/HT214124
https://support.apple.com/kb/HT214122
https://support.apple.com/kb/HT214120
https://support.apple.com/kb/HT214119
https://support.apple.com/kb/HT214118
https://support.apple.com/kb/HT214117
https://support.apple.com/kb/HT214116

Impacted products

5 products

Vendor	Product	Version
Apple	iOS and iPadOS	Affected: 0 , < 16.7.9 (custom) Affected: 0 , < 17.6 (custom)
Apple	macOS	Affected: 0 , < 12.7.6 (custom) Affected: 0 , < 13.6.8 (custom) Affected: 0 , < 14.6 (custom)
Apple	tvOS	Affected: 0 , < 17.6 (custom)
Apple	visionOS	Affected: 0 , < 1.3 (custom)
Apple	watchOS	Affected: 0 , < 10.6 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-04T17:23:48.780Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT214117"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT214116"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT214120"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT214124"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT214119"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT214123"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT214122"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT214118"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2024/Jul/16"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2024/Jul/23"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2024/Jul/21"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2024/Jul/20"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2024/Jul/17"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2024/Jul/22"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2024/Jul/18"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2024/Jul/19"
          },
          {
            "url": "https://support.apple.com/kb/HT214124"
          },
          {
            "url": "https://support.apple.com/kb/HT214122"
          },
          {
            "url": "https://support.apple.com/kb/HT214120"
          },
          {
            "url": "https://support.apple.com/kb/HT214119"
          },
          {
            "url": "https://support.apple.com/kb/HT214118"
          },
          {
            "url": "https://support.apple.com/kb/HT214117"
          },
          {
            "url": "https://support.apple.com/kb/HT214116"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 6.2,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-40788",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-07-29T23:52:29.543985Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-843",
                "description": "CWE-843 Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-27T01:05:14.082Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "16.7.9",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "17.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "12.7.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "13.6.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "14.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "1.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "10.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8, tvOS 17.6, visionOS 1.3, watchOS 10.6. A local attacker may be able to cause unexpected system shutdown."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A local attacker may be able to cause unexpected system shutdown",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-02T18:20:36.623Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/120908"
        },
        {
          "url": "https://support.apple.com/en-us/120909"
        },
        {
          "url": "https://support.apple.com/en-us/120910"
        },
        {
          "url": "https://support.apple.com/en-us/120911"
        },
        {
          "url": "https://support.apple.com/en-us/120912"
        },
        {
          "url": "https://support.apple.com/en-us/120914"
        },
        {
          "url": "https://support.apple.com/en-us/120915"
        },
        {
          "url": "https://support.apple.com/en-us/120916"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2024-40788",
    "datePublished": "2024-07-29T22:17:02.532Z",
    "dateReserved": "2024-07-10T17:11:04.689Z",
    "dateUpdated": "2026-04-02T18:20:36.623Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2024-40788",
      "date": "2026-06-11",
      "epss": "0.00022",
      "percentile": "0.06561"
    },
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"16.7.9\", \"matchCriteriaId\": \"29A9994D-AE71-45E0-8CC5-E6219420F7E8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"17.0\", \"versionEndExcluding\": \"17.6\", \"matchCriteriaId\": \"B191C80F-3801-4AD0-9A63-EB294A029D7C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"16.7.9\", \"matchCriteriaId\": \"1ACEA981-1D96-49F1-8048-74D21D71FD39\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"17.0\", \"versionEndExcluding\": \"17.6\", \"matchCriteriaId\": \"34E8C966-19C7-4376-A0C3-A242720F62DF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"12.7.6\", \"matchCriteriaId\": \"3556C7C3-14B6-4846-B3E8-FE07A503155F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"13.0\", \"versionEndExcluding\": \"13.6.8\", \"matchCriteriaId\": \"7008225C-B5B9-4F87-9392-DD2080717E9A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"14.0\", \"versionEndExcluding\": \"14.6\", \"matchCriteriaId\": \"51E2E93B-C5A3-4C83-B806-2EC555AD45FE\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"17.6\", \"matchCriteriaId\": \"9FB1D28B-EF0E-4CA0-90F7-073A85D001E5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"1.3\", \"matchCriteriaId\": \"CDBCE187-329C-4B1C-89B7-7D45A7946AF4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"10.6\", \"matchCriteriaId\": \"035D8460-BD6F-4696-9D7B-BA571A994FD0\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, macOS Ventura 13.6.8, macOS Monterey 12.7.6, iOS 17.6 and iPadOS 17.6, watchOS 10.6, tvOS 17.6, visionOS 1.3, macOS Sonoma 14.6. A local attacker may be able to cause unexpected system shutdown.\"}, {\"lang\": \"es\", \"value\": \"Se solucion\\u00f3 un problema de confusi\\u00f3n de tipos mejorando el manejo de la memoria. Este problema se solucion\\u00f3 en iOS 16.7.9 y iPadOS 16.7.9, macOS Ventura 13.6.8, macOS Monterey 12.7.6, iOS 17.6 y iPadOS 17.6, watchOS 10.6, tvOS 17.6, visionOS 1.3, macOS Sonoma 14.6. Un atacante local puede provocar un apagado inesperado del sistema.\"}]",
      "id": "CVE-2024-40788",
      "lastModified": "2024-11-21T09:31:37.927",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\", \"baseScore\": 5.5, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"LOCAL\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"LOW\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 1.8, \"impactScore\": 3.6}, {\"source\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"type\": \"Secondary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"baseScore\": 6.2, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"LOCAL\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 2.5, \"impactScore\": 3.6}]}",
      "published": "2024-07-29T23:15:12.200",
      "references": "[{\"url\": \"http://seclists.org/fulldisclosure/2024/Jul/16\", \"source\": \"product-security@apple.com\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://seclists.org/fulldisclosure/2024/Jul/17\", \"source\": \"product-security@apple.com\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://seclists.org/fulldisclosure/2024/Jul/18\", \"source\": \"product-security@apple.com\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://seclists.org/fulldisclosure/2024/Jul/19\", \"source\": \"product-security@apple.com\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://seclists.org/fulldisclosure/2024/Jul/20\", \"source\": \"product-security@apple.com\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://seclists.org/fulldisclosure/2024/Jul/21\", \"source\": \"product-security@apple.com\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://seclists.org/fulldisclosure/2024/Jul/22\", \"source\": \"product-security@apple.com\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://seclists.org/fulldisclosure/2024/Jul/23\", \"source\": \"product-security@apple.com\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://support.apple.com/en-us/HT214116\", \"source\": \"product-security@apple.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://support.apple.com/en-us/HT214117\", \"source\": \"product-security@apple.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://support.apple.com/en-us/HT214118\", \"source\": \"product-security@apple.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://support.apple.com/en-us/HT214119\", \"source\": \"product-security@apple.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://support.apple.com/en-us/HT214120\", \"source\": \"product-security@apple.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://support.apple.com/en-us/HT214122\", \"source\": \"product-security@apple.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://support.apple.com/en-us/HT214123\", \"source\": \"product-security@apple.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://support.apple.com/en-us/HT214124\", \"source\": \"product-security@apple.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://seclists.org/fulldisclosure/2024/Jul/16\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://seclists.org/fulldisclosure/2024/Jul/17\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://seclists.org/fulldisclosure/2024/Jul/18\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://seclists.org/fulldisclosure/2024/Jul/19\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://seclists.org/fulldisclosure/2024/Jul/20\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://seclists.org/fulldisclosure/2024/Jul/21\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://seclists.org/fulldisclosure/2024/Jul/22\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://seclists.org/fulldisclosure/2024/Jul/23\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://support.apple.com/en-us/HT214116\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://support.apple.com/en-us/HT214117\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://support.apple.com/en-us/HT214118\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://support.apple.com/en-us/HT214119\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://support.apple.com/en-us/HT214120\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://support.apple.com/en-us/HT214122\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://support.apple.com/en-us/HT214123\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://support.apple.com/en-us/HT214124\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}]",
      "sourceIdentifier": "product-security@apple.com",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-843\"}]}, {\"source\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"type\": \"Secondary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-843\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-40788\",\"sourceIdentifier\":\"product-security@apple.com\",\"published\":\"2024-07-29T23:15:12.200\",\"lastModified\":\"2026-04-02T19:17:44.213\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8, tvOS 17.6, visionOS 1.3, watchOS 10.6. A local attacker may be able to cause unexpected system shutdown.\"},{\"lang\":\"es\",\"value\":\"Se solucion\u00f3 un problema de confusi\u00f3n de tipos mejorando el manejo de la memoria. Este problema se solucion\u00f3 en iOS 16.7.9 y iPadOS 16.7.9, macOS Ventura 13.6.8, macOS Monterey 12.7.6, iOS 17.6 y iPadOS 17.6, watchOS 10.6, tvOS 17.6, visionOS 1.3, macOS Sonoma 14.6. Un atacante local puede provocar un apagado inesperado del sistema.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":6.2,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.5,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-843\"}]},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-843\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"16.7.9\",\"matchCriteriaId\":\"29A9994D-AE71-45E0-8CC5-E6219420F7E8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"17.0\",\"versionEndExcluding\":\"17.6\",\"matchCriteriaId\":\"B191C80F-3801-4AD0-9A63-EB294A029D7C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"16.7.9\",\"matchCriteriaId\":\"1ACEA981-1D96-49F1-8048-74D21D71FD39\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"17.0\",\"versionEndExcluding\":\"17.6\",\"matchCriteriaId\":\"34E8C966-19C7-4376-A0C3-A242720F62DF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"12.7.6\",\"matchCriteriaId\":\"3556C7C3-14B6-4846-B3E8-FE07A503155F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"13.0\",\"versionEndExcluding\":\"13.6.8\",\"matchCriteriaId\":\"7008225C-B5B9-4F87-9392-DD2080717E9A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"14.0\",\"versionEndExcluding\":\"14.6\",\"matchCriteriaId\":\"51E2E93B-C5A3-4C83-B806-2EC555AD45FE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"17.6\",\"matchCriteriaId\":\"9FB1D28B-EF0E-4CA0-90F7-073A85D001E5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.3\",\"matchCriteriaId\":\"CDBCE187-329C-4B1C-89B7-7D45A7946AF4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.6\",\"matchCriteriaId\":\"035D8460-BD6F-4696-9D7B-BA571A994FD0\"}]}]}],\"references\":[{\"url\":\"https://support.apple.com/en-us/120908\",\"source\":\"product-security@apple.com\"},{\"url\":\"https://support.apple.com/en-us/120909\",\"source\":\"product-security@apple.com\"},{\"url\":\"https://support.apple.com/en-us/120910\",\"source\":\"product-security@apple.com\"},{\"url\":\"https://support.apple.com/en-us/120911\",\"source\":\"product-security@apple.com\"},{\"url\":\"https://support.apple.com/en-us/120912\",\"source\":\"product-security@apple.com\"},{\"url\":\"https://support.apple.com/en-us/120914\",\"source\":\"product-security@apple.com\"},{\"url\":\"https://support.apple.com/en-us/120915\",\"source\":\"product-security@apple.com\"},{\"url\":\"https://support.apple.com/en-us/120916\",\"source\":\"product-security@apple.com\"},{\"url\":\"http://seclists.org/fulldisclosure/2024/Jul/16\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://seclists.org/fulldisclosure/2024/Jul/17\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://seclists.org/fulldisclosure/2024/Jul/18\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://seclists.org/fulldisclosure/2024/Jul/19\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://seclists.org/fulldisclosure/2024/Jul/20\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://seclists.org/fulldisclosure/2024/Jul/21\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://seclists.org/fulldisclosure/2024/Jul/22\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://seclists.org/fulldisclosure/2024/Jul/23\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://support.apple.com/en-us/HT214116\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/en-us/HT214117\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/en-us/HT214118\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/en-us/HT214119\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/en-us/HT214120\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/en-us/HT214122\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/en-us/HT214123\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/en-us/HT214124\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/kb/HT214116\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://support.apple.com/kb/HT214117\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://support.apple.com/kb/HT214118\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://support.apple.com/kb/HT214119\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://support.apple.com/kb/HT214120\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://support.apple.com/kb/HT214122\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://support.apple.com/kb/HT214124\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://support.apple.com/en-us/HT214117\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://support.apple.com/en-us/HT214116\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://support.apple.com/en-us/HT214120\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://support.apple.com/en-us/HT214124\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://support.apple.com/en-us/HT214119\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://support.apple.com/en-us/HT214123\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://support.apple.com/en-us/HT214122\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://support.apple.com/en-us/HT214118\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://seclists.org/fulldisclosure/2024/Jul/16\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://seclists.org/fulldisclosure/2024/Jul/23\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://seclists.org/fulldisclosure/2024/Jul/21\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://seclists.org/fulldisclosure/2024/Jul/20\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://seclists.org/fulldisclosure/2024/Jul/17\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://seclists.org/fulldisclosure/2024/Jul/22\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://seclists.org/fulldisclosure/2024/Jul/18\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://seclists.org/fulldisclosure/2024/Jul/19\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://support.apple.com/kb/HT214124\"}, {\"url\": \"https://support.apple.com/kb/HT214122\"}, {\"url\": \"https://support.apple.com/kb/HT214120\"}, {\"url\": \"https://support.apple.com/kb/HT214119\"}, {\"url\": \"https://support.apple.com/kb/HT214118\"}, {\"url\": \"https://support.apple.com/kb/HT214117\"}, {\"url\": \"https://support.apple.com/kb/HT214116\"}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2025-11-04T17:23:48.780Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 6.2, \"attackVector\": \"LOCAL\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-40788\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-07-29T23:52:29.543985Z\"}}}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-843\", \"description\": \"CWE-843 Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-07-29T23:52:32.674Z\"}}], \"cna\": {\"affected\": [{\"vendor\": \"Apple\", \"product\": \"iOS and iPadOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"16.7.9\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"17.6\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Apple\", \"product\": \"macOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"12.7.6\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"13.6.8\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"14.6\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Apple\", \"product\": \"tvOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"17.6\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Apple\", \"product\": \"visionOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"1.3\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Apple\", \"product\": \"watchOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"10.6\", \"versionType\": \"custom\"}]}], \"references\": [{\"url\": \"https://support.apple.com/en-us/120908\"}, {\"url\": \"https://support.apple.com/en-us/120909\"}, {\"url\": \"https://support.apple.com/en-us/120910\"}, {\"url\": \"https://support.apple.com/en-us/120911\"}, {\"url\": \"https://support.apple.com/en-us/120912\"}, {\"url\": \"https://support.apple.com/en-us/120914\"}, {\"url\": \"https://support.apple.com/en-us/120915\"}, {\"url\": \"https://support.apple.com/en-us/120916\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8, tvOS 17.6, visionOS 1.3, watchOS 10.6. A local attacker may be able to cause unexpected system shutdown.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"description\": \"A local attacker may be able to cause unexpected system shutdown\"}]}], \"providerMetadata\": {\"orgId\": \"286789f9-fbc2-4510-9f9a-43facdede74c\", \"shortName\": \"apple\", \"dateUpdated\": \"2026-04-02T18:20:36.623Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-40788\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-04-02T18:20:36.623Z\", \"dateReserved\": \"2024-07-10T17:11:04.689Z\", \"assignerOrgId\": \"286789f9-fbc2-4510-9f9a-43facdede74c\", \"datePublished\": \"2024-07-29T22:17:02.532Z\", \"assignerShortName\": \"apple\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

CERTFR-2024-AVI-0634

Vulnerability from certfr_avis - Published: - Updated:

De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.

Apple indique que la vulnérabilité CVE-2024-23296 est activement exploitée.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
Apple	N/A	macOS Monterey versions antérieures à 12.7.6
Apple	N/A	iOS et iPadOS versions antérieures à 17.6
Apple	N/A	macOS Ventura versions antérieures à 13.6.8
Apple	N/A	visionOS versions antérieures à 1.3
Apple	N/A	tvOS versions antérieures à 17.6
Apple	N/A	iOS et iPadOS versions antérieures à 16.7.9
Apple	N/A	watchOS versions antérieures à 10.6
Apple	N/A	Safari versions antérieures à 17.6
Apple	N/A	macOS Sonoma versions antérieures à 14.6

References

Title

Publication Time

CERTFR-2024-AVI-0634

Vulnerability from certfr_avis - Published: - Updated:

Apple indique que la vulnérabilité CVE-2024-23296 est activement exploitée.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
Apple	N/A	macOS Monterey versions antérieures à 12.7.6
Apple	N/A	iOS et iPadOS versions antérieures à 17.6
Apple	N/A	macOS Ventura versions antérieures à 13.6.8
Apple	N/A	visionOS versions antérieures à 1.3
Apple	N/A	tvOS versions antérieures à 17.6
Apple	N/A	iOS et iPadOS versions antérieures à 16.7.9
Apple	N/A	watchOS versions antérieures à 10.6
Apple	N/A	Safari versions antérieures à 17.6
Apple	N/A	macOS Sonoma versions antérieures à 14.6

References

Title

Publication Time

FKIE_CVE-2024-40788

Vulnerability from fkie_nvd - Published: 2024-07-29 23:15 - Updated: 2026-04-02 19:17

Severity

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
6.2 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Summary

References

URL	Tags
product-security@apple.com	https://support.apple.com/en-us/120908
product-security@apple.com	https://support.apple.com/en-us/120909
product-security@apple.com	https://support.apple.com/en-us/120910
product-security@apple.com	https://support.apple.com/en-us/120911
product-security@apple.com	https://support.apple.com/en-us/120912
product-security@apple.com	https://support.apple.com/en-us/120914
product-security@apple.com	https://support.apple.com/en-us/120915
product-security@apple.com	https://support.apple.com/en-us/120916
af854a3a-2127-422b-91ae-364da2661108	http://seclists.org/fulldisclosure/2024/Jul/16	Mailing List, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://seclists.org/fulldisclosure/2024/Jul/17	Mailing List, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://seclists.org/fulldisclosure/2024/Jul/18	Mailing List, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://seclists.org/fulldisclosure/2024/Jul/19	Mailing List, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://seclists.org/fulldisclosure/2024/Jul/20	Mailing List, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://seclists.org/fulldisclosure/2024/Jul/21	Mailing List, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://seclists.org/fulldisclosure/2024/Jul/22	Mailing List, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://seclists.org/fulldisclosure/2024/Jul/23	Mailing List, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	https://support.apple.com/en-us/HT214116	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://support.apple.com/en-us/HT214117	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://support.apple.com/en-us/HT214118	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://support.apple.com/en-us/HT214119	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://support.apple.com/en-us/HT214120	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://support.apple.com/en-us/HT214122	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://support.apple.com/en-us/HT214123	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://support.apple.com/en-us/HT214124	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://support.apple.com/kb/HT214116
af854a3a-2127-422b-91ae-364da2661108	https://support.apple.com/kb/HT214117
af854a3a-2127-422b-91ae-364da2661108	https://support.apple.com/kb/HT214118
af854a3a-2127-422b-91ae-364da2661108	https://support.apple.com/kb/HT214119
af854a3a-2127-422b-91ae-364da2661108	https://support.apple.com/kb/HT214120
af854a3a-2127-422b-91ae-364da2661108	https://support.apple.com/kb/HT214122
af854a3a-2127-422b-91ae-364da2661108	https://support.apple.com/kb/HT214124

Impacted products

Vendor	Product	Version
apple	ipados	*
apple	ipados	*
apple	iphone_os	*
apple	iphone_os	*
apple	macos	*
apple	macos	*
apple	macos	*
apple	tvos	*
apple	visionos	*
apple	watchos	*

JSON

To clipboard

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "29A9994D-AE71-45E0-8CC5-E6219420F7E8",
              "versionEndExcluding": "16.7.9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B191C80F-3801-4AD0-9A63-EB294A029D7C",
              "versionEndExcluding": "17.6",
              "versionStartIncluding": "17.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "1ACEA981-1D96-49F1-8048-74D21D71FD39",
              "versionEndExcluding": "16.7.9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "34E8C966-19C7-4376-A0C3-A242720F62DF",
              "versionEndExcluding": "17.6",
              "versionStartIncluding": "17.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "3556C7C3-14B6-4846-B3E8-FE07A503155F",
              "versionEndExcluding": "12.7.6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7008225C-B5B9-4F87-9392-DD2080717E9A",
              "versionEndExcluding": "13.6.8",
              "versionStartIncluding": "13.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "51E2E93B-C5A3-4C83-B806-2EC555AD45FE",
              "versionEndExcluding": "14.6",
              "versionStartIncluding": "14.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "9FB1D28B-EF0E-4CA0-90F7-073A85D001E5",
              "versionEndExcluding": "17.6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "CDBCE187-329C-4B1C-89B7-7D45A7946AF4",
              "versionEndExcluding": "1.3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "035D8460-BD6F-4696-9D7B-BA571A994FD0",
              "versionEndExcluding": "10.6",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8, tvOS 17.6, visionOS 1.3, watchOS 10.6. A local attacker may be able to cause unexpected system shutdown."
    },
    {
      "lang": "es",
      "value": "Se solucion\u00f3 un problema de confusi\u00f3n de tipos mejorando el manejo de la memoria. Este problema se solucion\u00f3 en iOS 16.7.9 y iPadOS 16.7.9, macOS Ventura 13.6.8, macOS Monterey 12.7.6, iOS 17.6 y iPadOS 17.6, watchOS 10.6, tvOS 17.6, visionOS 1.3, macOS Sonoma 14.6. Un atacante local puede provocar un apagado inesperado del sistema."
    }
  ],
  "id": "CVE-2024-40788",
  "lastModified": "2026-04-02T19:17:44.213",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 5.5,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 3.6,
        "source": "nvd@nist.gov",
        "type": "Primary"
      },
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 6.2,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 2.5,
        "impactScore": 3.6,
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  },
  "published": "2024-07-29T23:15:12.200",
  "references": [
    {
      "source": "product-security@apple.com",
      "url": "https://support.apple.com/en-us/120908"
    },
    {
      "source": "product-security@apple.com",
      "url": "https://support.apple.com/en-us/120909"
    },
    {
      "source": "product-security@apple.com",
      "url": "https://support.apple.com/en-us/120910"
    },
    {
      "source": "product-security@apple.com",
      "url": "https://support.apple.com/en-us/120911"
    },
    {
      "source": "product-security@apple.com",
      "url": "https://support.apple.com/en-us/120912"
    },
    {
      "source": "product-security@apple.com",
      "url": "https://support.apple.com/en-us/120914"
    },
    {
      "source": "product-security@apple.com",
      "url": "https://support.apple.com/en-us/120915"
    },
    {
      "source": "product-security@apple.com",
      "url": "https://support.apple.com/en-us/120916"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://seclists.org/fulldisclosure/2024/Jul/16"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://seclists.org/fulldisclosure/2024/Jul/17"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://seclists.org/fulldisclosure/2024/Jul/18"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://seclists.org/fulldisclosure/2024/Jul/19"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://seclists.org/fulldisclosure/2024/Jul/20"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://seclists.org/fulldisclosure/2024/Jul/21"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://seclists.org/fulldisclosure/2024/Jul/22"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://seclists.org/fulldisclosure/2024/Jul/23"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/HT214116"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/HT214117"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/HT214118"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/HT214119"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/HT214120"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/HT214122"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/HT214123"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/HT214124"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://support.apple.com/kb/HT214116"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://support.apple.com/kb/HT214117"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://support.apple.com/kb/HT214118"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://support.apple.com/kb/HT214119"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://support.apple.com/kb/HT214120"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://support.apple.com/kb/HT214122"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://support.apple.com/kb/HT214124"
    }
  ],
  "sourceIdentifier": "product-security@apple.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-843"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    },
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-843"
        }
      ],
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary"
    }
  ]
}

GHSA-98G4-WC2V-QQH4

Vulnerability from github – Published: 2024-07-30 00:34 – Updated: 2026-04-02 21:31

Details

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, macOS Ventura 13.6.8, macOS Monterey 12.7.6, iOS 17.6 and iPadOS 17.6, watchOS 10.6, tvOS 17.6, visionOS 1.3, macOS Sonoma 14.6. A local attacker may be able to cause unexpected system shutdown.

Severity

5.5 (Medium)


                  
                    CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2024-40788"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-843"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-07-29T23:15:12Z",
    "severity": "MODERATE"
  },
  "details": "A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, macOS Ventura 13.6.8, macOS Monterey 12.7.6, iOS 17.6 and iPadOS 17.6, watchOS 10.6, tvOS 17.6, visionOS 1.3, macOS Sonoma 14.6. A local attacker may be able to cause unexpected system shutdown.",
  "id": "GHSA-98g4-wc2v-qqh4",
  "modified": "2026-04-02T21:31:49Z",
  "published": "2024-07-30T00:34:27Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-40788"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/120908"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/120909"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/120910"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/120911"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/120912"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/120914"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/120915"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/120916"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/HT214116"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/HT214117"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/HT214118"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/HT214119"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/HT214120"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/HT214122"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/HT214123"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/HT214124"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/kb/HT214116"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/kb/HT214117"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/kb/HT214118"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/kb/HT214119"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/kb/HT214120"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/kb/HT214122"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/kb/HT214124"
    },
    {
      "type": "WEB",
      "url": "http://seclists.org/fulldisclosure/2024/Jul/16"
    },
    {
      "type": "WEB",
      "url": "http://seclists.org/fulldisclosure/2024/Jul/17"
    },
    {
      "type": "WEB",
      "url": "http://seclists.org/fulldisclosure/2024/Jul/18"
    },
    {
      "type": "WEB",
      "url": "http://seclists.org/fulldisclosure/2024/Jul/19"
    },
    {
      "type": "WEB",
      "url": "http://seclists.org/fulldisclosure/2024/Jul/20"
    },
    {
      "type": "WEB",
      "url": "http://seclists.org/fulldisclosure/2024/Jul/21"
    },
    {
      "type": "WEB",
      "url": "http://seclists.org/fulldisclosure/2024/Jul/22"
    },
    {
      "type": "WEB",
      "url": "http://seclists.org/fulldisclosure/2024/Jul/23"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    }
  ]
}

NCSC-2024-0319

Vulnerability from csaf_ncscnl - Published: 2024-07-30 08:39 - Updated: 2024-07-30 08:39

Summary

Kwetsbaarheden verholpen in Apple iOS en iPadOS

Notes

The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions: NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein. NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory. This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.

Feiten: Apple heeft kwetsbaarheden verholpen in iOS en iPadOS.

Interpretaties: Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot een Denial-of-Service, toegang tot systeemgegevens of toegang tot gevoelige gegevens. Om toegang te krijgen tot gevoelige gegevens, moet de kwaadwillende fysieke toegang hebben tot het kwetsbare systeem. Om een Denial-of-Service te veroorzaken, of systeemgegevens te bemachtigen moet de kwaadwillende het slachtoffer misleiden een malafide app te installeren en draaien.

Oplossingen: Apple heeft updates uitgebracht om de kwetsbaarheden te verhelpen in iOS en iPadOS 16.7.9 & 17.6. Zie bijgevoegde referenties voor meer informatie.

Kans: medium

Schade: high

CWE-122: Heap-based Buffer Overflow

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

CWE-284: Improper Access Control

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

CWE-400: Uncontrolled Resource Consumption

CWE-404: Improper Resource Shutdown or Release

CWE-787: Out-of-bounds Write

CVE-2023-6277

CWE-400 - Uncontrolled Resource Consumption

CVE-2023-52356

CWE-404 - Improper Resource Shutdown or Release

CVE-2024-4558

CVE-2024-27863

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
ios_and_ipados apple	`cpe:2.3:a:apple:ios_and_ipados:unspecified:::::::*`	—

CVE-2024-27871

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
ios_and_ipados apple	`cpe:2.3:a:apple:ios_and_ipados:unspecified:::::::*`	—

CVE-2024-27873

CWE-787 - Out-of-bounds Write

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
ios_and_ipados apple	`cpe:2.3:a:apple:ios_and_ipados:unspecified:::::::*`	—

CVE-2024-40774

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
ios_and_ipados apple	`cpe:2.3:a:apple:ios_and_ipados:unspecified:::::::*`	—

CVE-2024-40776

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
ios_and_ipados apple	`cpe:2.3:a:apple:ios_and_ipados:unspecified:::::::*`	—

CVE-2024-40777

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
ios_and_ipados apple	`cpe:2.3:a:apple:ios_and_ipados:unspecified:::::::*`	—

CVE-2024-40778

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
ios_and_ipados apple	`cpe:2.3:a:apple:ios_and_ipados:unspecified:::::::*`	—

CVE-2024-40779

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
ios_and_ipados apple	`cpe:2.3:a:apple:ios_and_ipados:unspecified:::::::*`	—

CVE-2024-40780

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
ios_and_ipados apple	`cpe:2.3:a:apple:ios_and_ipados:unspecified:::::::*`	—

CVE-2024-40782

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
ios_and_ipados apple	`cpe:2.3:a:apple:ios_and_ipados:unspecified:::::::*`	—

CVE-2024-40784

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
ios_and_ipados apple	`cpe:2.3:a:apple:ios_and_ipados:unspecified:::::::*`	—

CVE-2024-40785

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
ios_and_ipados apple	`cpe:2.3:a:apple:ios_and_ipados:unspecified:::::::*`	—

CVE-2024-40786

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
ios_and_ipados apple	`cpe:2.3:a:apple:ios_and_ipados:unspecified:::::::*`	—

CVE-2024-40787

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
ios_and_ipados apple	`cpe:2.3:a:apple:ios_and_ipados:unspecified:::::::*`	—

CVE-2024-40788

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
ios_and_ipados apple	`cpe:2.3:a:apple:ios_and_ipados:unspecified:::::::*`	—

CVE-2024-40789

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
ios_and_ipados apple	`cpe:2.3:a:apple:ios_and_ipados:unspecified:::::::*`	—

CVE-2024-40793

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
ios_and_ipados apple	`cpe:2.3:a:apple:ios_and_ipados:unspecified:::::::*`	—

CVE-2024-40794

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
ios_and_ipados apple	`cpe:2.3:a:apple:ios_and_ipados:unspecified:::::::*`	—

CVE-2024-40795

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
ios_and_ipados apple	`cpe:2.3:a:apple:ios_and_ipados:unspecified:::::::*`	—

CVE-2024-40796

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
ios_and_ipados apple	`cpe:2.3:a:apple:ios_and_ipados:unspecified:::::::*`	—

CVE-2024-40798

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
ios_and_ipados apple	`cpe:2.3:a:apple:ios_and_ipados:unspecified:::::::*`	—

CVE-2024-40799

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
ios_and_ipados apple	`cpe:2.3:a:apple:ios_and_ipados:unspecified:::::::*`	—

CVE-2024-40805

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
ios_and_ipados apple	`cpe:2.3:a:apple:ios_and_ipados:unspecified:::::::*`	—

CVE-2024-40806

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
ios_and_ipados apple	`cpe:2.3:a:apple:ios_and_ipados:unspecified:::::::*`	—

CVE-2024-40809

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
ios_and_ipados apple	`cpe:2.3:a:apple:ios_and_ipados:unspecified:::::::*`	—

CVE-2024-40812

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
ios_and_ipados apple	`cpe:2.3:a:apple:ios_and_ipados:unspecified:::::::*`	—

CVE-2024-40813

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
ios_and_ipados apple	`cpe:2.3:a:apple:ios_and_ipados:unspecified:::::::*`	—

CVE-2024-40815

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
ios_and_ipados apple	`cpe:2.3:a:apple:ios_and_ipados:unspecified:::::::*`	—

CVE-2024-40818

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
ios_and_ipados apple	`cpe:2.3:a:apple:ios_and_ipados:unspecified:::::::*`	—

CVE-2024-40822

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
ios_and_ipados apple	`cpe:2.3:a:apple:ios_and_ipados:unspecified:::::::*`	—

CVE-2024-40824

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
ios_and_ipados apple	`cpe:2.3:a:apple:ios_and_ipados:unspecified:::::::*`	—

CVE-2024-40829

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
ios_and_ipados apple	`cpe:2.3:a:apple:ios_and_ipados:unspecified:::::::*`	—

CVE-2024-40833

CWE-284 - Improper Access Control

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
ios_and_ipados apple	`cpe:2.3:a:apple:ios_and_ipados:unspecified:::::::*`	—

CVE-2024-40835

CWE-284 - Improper Access Control

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
ios_and_ipados apple	`cpe:2.3:a:apple:ios_and_ipados:unspecified:::::::*`	—

CVE-2024-40836

CWE-284 - Improper Access Control

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
ios_and_ipados apple	`cpe:2.3:a:apple:ios_and_ipados:unspecified:::::::*`	—

References

40 references

URL	Category
https://support.apple.com/en-us/HT214116	external
https://support.apple.com/en-us/HT214117	external
https://api.ncsc.nl/velma/v1/vulnerabilities/2023…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2023…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self

JSON

To clipboard

{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "nl",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n    NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n    NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n    This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
      },
      {
        "category": "description",
        "text": "Apple heeft kwetsbaarheden verholpen in iOS en iPadOS.",
        "title": "Feiten"
      },
      {
        "category": "description",
        "text": "Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot een Denial-of-Service, toegang tot systeemgegevens of toegang tot gevoelige gegevens.\n\nOm toegang te krijgen tot gevoelige gegevens, moet de kwaadwillende fysieke toegang hebben tot het kwetsbare systeem. Om een Denial-of-Service te veroorzaken, of systeemgegevens te bemachtigen moet de kwaadwillende het slachtoffer misleiden een malafide app te installeren en draaien.",
        "title": "Interpretaties"
      },
      {
        "category": "description",
        "text": "Apple heeft updates uitgebracht om de kwetsbaarheden te verhelpen in iOS en iPadOS 16.7.9 \u0026 17.6. Zie bijgevoegde referenties voor meer informatie.",
        "title": "Oplossingen"
      },
      {
        "category": "general",
        "text": "medium",
        "title": "Kans"
      },
      {
        "category": "general",
        "text": "high",
        "title": "Schade"
      },
      {
        "category": "general",
        "text": "Heap-based Buffer Overflow",
        "title": "CWE-122"
      },
      {
        "category": "general",
        "text": "Exposure of Sensitive Information to an Unauthorized Actor",
        "title": "CWE-200"
      },
      {
        "category": "general",
        "text": "Improper Access Control",
        "title": "CWE-284"
      },
      {
        "category": "general",
        "text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
        "title": "CWE-362"
      },
      {
        "category": "general",
        "text": "Uncontrolled Resource Consumption",
        "title": "CWE-400"
      },
      {
        "category": "general",
        "text": "Improper Resource Shutdown or Release",
        "title": "CWE-404"
      },
      {
        "category": "general",
        "text": "Out-of-bounds Write",
        "title": "CWE-787"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "cert@ncsc.nl",
      "name": "Nationaal Cyber Security Centrum",
      "namespace": "https://www.ncsc.nl/"
    },
    "references": [
      {
        "category": "external",
        "summary": "Source - apple",
        "url": "https://support.apple.com/en-us/HT214116"
      },
      {
        "category": "external",
        "summary": "Source - apple",
        "url": "https://support.apple.com/en-us/HT214117"
      }
    ],
    "title": "Kwetsbaarheden verholpen in Apple iOS en iPadOS",
    "tracking": {
      "current_release_date": "2024-07-30T08:39:16.399394Z",
      "id": "NCSC-2024-0319",
      "initial_release_date": "2024-07-30T08:39:16.399394Z",
      "revision_history": [
        {
          "date": "2024-07-30T08:39:16.399394Z",
          "number": "0",
          "summary": "Initiele versie"
        }
      ],
      "status": "final",
      "version": "1.0.0"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "ios_and_ipados",
            "product": {
              "name": "ios_and_ipados",
              "product_id": "CSAFPID-1465374",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:apple:ios_and_ipados:unspecified:*:*:*:*:*:*:*"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "apple"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-6277",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "notes": [
        {
          "category": "other",
          "text": "Uncontrolled Resource Consumption",
          "title": "CWE-400"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-6277",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-6277.json"
        }
      ],
      "title": "CVE-2023-6277"
    },
    {
      "cve": "CVE-2023-52356",
      "cwe": {
        "id": "CWE-404",
        "name": "Improper Resource Shutdown or Release"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Resource Shutdown or Release",
          "title": "CWE-404"
        },
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-52356",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-52356.json"
        }
      ],
      "title": "CVE-2023-52356"
    },
    {
      "cve": "CVE-2024-4558",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-4558",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-4558.json"
        }
      ],
      "title": "CVE-2024-4558"
    },
    {
      "cve": "CVE-2024-27863",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "notes": [
        {
          "category": "other",
          "text": "Exposure of Sensitive Information to an Unauthorized Actor",
          "title": "CWE-200"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1465374"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-27863",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27863.json"
        }
      ],
      "title": "CVE-2024-27863"
    },
    {
      "cve": "CVE-2024-27871",
      "product_status": {
        "known_affected": [
          "CSAFPID-1465374"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-27871",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27871.json"
        }
      ],
      "title": "CVE-2024-27871"
    },
    {
      "cve": "CVE-2024-27873",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Write",
          "title": "CWE-787"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1465374"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-27873",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27873.json"
        }
      ],
      "title": "CVE-2024-27873"
    },
    {
      "cve": "CVE-2024-40774",
      "product_status": {
        "known_affected": [
          "CSAFPID-1465374"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40774",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40774.json"
        }
      ],
      "title": "CVE-2024-40774"
    },
    {
      "cve": "CVE-2024-40776",
      "product_status": {
        "known_affected": [
          "CSAFPID-1465374"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40776",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40776.json"
        }
      ],
      "title": "CVE-2024-40776"
    },
    {
      "cve": "CVE-2024-40777",
      "product_status": {
        "known_affected": [
          "CSAFPID-1465374"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40777",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40777.json"
        }
      ],
      "title": "CVE-2024-40777"
    },
    {
      "cve": "CVE-2024-40778",
      "product_status": {
        "known_affected": [
          "CSAFPID-1465374"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40778",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40778.json"
        }
      ],
      "title": "CVE-2024-40778"
    },
    {
      "cve": "CVE-2024-40779",
      "product_status": {
        "known_affected": [
          "CSAFPID-1465374"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40779",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40779.json"
        }
      ],
      "title": "CVE-2024-40779"
    },
    {
      "cve": "CVE-2024-40780",
      "product_status": {
        "known_affected": [
          "CSAFPID-1465374"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40780",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40780.json"
        }
      ],
      "title": "CVE-2024-40780"
    },
    {
      "cve": "CVE-2024-40782",
      "product_status": {
        "known_affected": [
          "CSAFPID-1465374"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40782",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40782.json"
        }
      ],
      "title": "CVE-2024-40782"
    },
    {
      "cve": "CVE-2024-40784",
      "product_status": {
        "known_affected": [
          "CSAFPID-1465374"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40784",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40784.json"
        }
      ],
      "title": "CVE-2024-40784"
    },
    {
      "cve": "CVE-2024-40785",
      "product_status": {
        "known_affected": [
          "CSAFPID-1465374"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40785",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40785.json"
        }
      ],
      "title": "CVE-2024-40785"
    },
    {
      "cve": "CVE-2024-40786",
      "product_status": {
        "known_affected": [
          "CSAFPID-1465374"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40786",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40786.json"
        }
      ],
      "title": "CVE-2024-40786"
    },
    {
      "cve": "CVE-2024-40787",
      "product_status": {
        "known_affected": [
          "CSAFPID-1465374"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40787",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40787.json"
        }
      ],
      "title": "CVE-2024-40787"
    },
    {
      "cve": "CVE-2024-40788",
      "product_status": {
        "known_affected": [
          "CSAFPID-1465374"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40788",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40788.json"
        }
      ],
      "title": "CVE-2024-40788"
    },
    {
      "cve": "CVE-2024-40789",
      "product_status": {
        "known_affected": [
          "CSAFPID-1465374"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40789",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40789.json"
        }
      ],
      "title": "CVE-2024-40789"
    },
    {
      "cve": "CVE-2024-40793",
      "product_status": {
        "known_affected": [
          "CSAFPID-1465374"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40793",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40793.json"
        }
      ],
      "title": "CVE-2024-40793"
    },
    {
      "cve": "CVE-2024-40794",
      "product_status": {
        "known_affected": [
          "CSAFPID-1465374"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40794",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40794.json"
        }
      ],
      "title": "CVE-2024-40794"
    },
    {
      "cve": "CVE-2024-40795",
      "product_status": {
        "known_affected": [
          "CSAFPID-1465374"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40795",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40795.json"
        }
      ],
      "title": "CVE-2024-40795"
    },
    {
      "cve": "CVE-2024-40796",
      "product_status": {
        "known_affected": [
          "CSAFPID-1465374"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40796",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40796.json"
        }
      ],
      "title": "CVE-2024-40796"
    },
    {
      "cve": "CVE-2024-40798",
      "product_status": {
        "known_affected": [
          "CSAFPID-1465374"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40798",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40798.json"
        }
      ],
      "title": "CVE-2024-40798"
    },
    {
      "cve": "CVE-2024-40799",
      "product_status": {
        "known_affected": [
          "CSAFPID-1465374"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40799",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40799.json"
        }
      ],
      "title": "CVE-2024-40799"
    },
    {
      "cve": "CVE-2024-40805",
      "product_status": {
        "known_affected": [
          "CSAFPID-1465374"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40805",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40805.json"
        }
      ],
      "title": "CVE-2024-40805"
    },
    {
      "cve": "CVE-2024-40806",
      "product_status": {
        "known_affected": [
          "CSAFPID-1465374"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40806",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40806.json"
        }
      ],
      "title": "CVE-2024-40806"
    },
    {
      "cve": "CVE-2024-40809",
      "product_status": {
        "known_affected": [
          "CSAFPID-1465374"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40809",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40809.json"
        }
      ],
      "title": "CVE-2024-40809"
    },
    {
      "cve": "CVE-2024-40812",
      "product_status": {
        "known_affected": [
          "CSAFPID-1465374"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40812",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40812.json"
        }
      ],
      "title": "CVE-2024-40812"
    },
    {
      "cve": "CVE-2024-40813",
      "product_status": {
        "known_affected": [
          "CSAFPID-1465374"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40813",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40813.json"
        }
      ],
      "title": "CVE-2024-40813"
    },
    {
      "cve": "CVE-2024-40815",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
          "title": "CWE-362"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1465374"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40815",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40815.json"
        }
      ],
      "title": "CVE-2024-40815"
    },
    {
      "cve": "CVE-2024-40818",
      "product_status": {
        "known_affected": [
          "CSAFPID-1465374"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40818",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40818.json"
        }
      ],
      "title": "CVE-2024-40818"
    },
    {
      "cve": "CVE-2024-40822",
      "product_status": {
        "known_affected": [
          "CSAFPID-1465374"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40822",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40822.json"
        }
      ],
      "title": "CVE-2024-40822"
    },
    {
      "cve": "CVE-2024-40824",
      "product_status": {
        "known_affected": [
          "CSAFPID-1465374"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40824",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40824.json"
        }
      ],
      "title": "CVE-2024-40824"
    },
    {
      "cve": "CVE-2024-40829",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "notes": [
        {
          "category": "other",
          "text": "Exposure of Sensitive Information to an Unauthorized Actor",
          "title": "CWE-200"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1465374"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40829",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40829.json"
        }
      ],
      "title": "CVE-2024-40829"
    },
    {
      "cve": "CVE-2024-40833",
      "cwe": {
        "id": "CWE-284",
        "name": "Improper Access Control"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Access Control",
          "title": "CWE-284"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1465374"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40833",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40833.json"
        }
      ],
      "title": "CVE-2024-40833"
    },
    {
      "cve": "CVE-2024-40835",
      "cwe": {
        "id": "CWE-284",
        "name": "Improper Access Control"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Access Control",
          "title": "CWE-284"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1465374"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40835",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40835.json"
        }
      ],
      "title": "CVE-2024-40835"
    },
    {
      "cve": "CVE-2024-40836",
      "cwe": {
        "id": "CWE-284",
        "name": "Improper Access Control"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Access Control",
          "title": "CWE-284"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1465374"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40836",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40836.json"
        }
      ],
      "title": "CVE-2024-40836"
    }
  ]
}

NCSC-2024-0320

Vulnerability from csaf_ncscnl - Published: 2024-07-30 08:42 - Updated: 2024-07-30 08:42

Summary

Kwetsbaarheden verholpen in Apple MacOS

Notes

Feiten: Apple heeft kwetsbaarheden verholpen in MacOS.

Interpretaties: Een kwaadwillende kan de kwetsbaarheden misbruiken om een beveiligingsmaatregel te omzeilen, zichzelf verhoogde rechten toe te kennen, toegang te krijgen tot gevoelige gegevens, willekeurige code uit te voeren, mogelijk met kernel-rechten of een Denial-of-Service te veroorzaken. Voor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide app te installeren en draaien, of een malafide link te volgen. Voor het uitvoeren van willekeurige code met kernel-rechten moet de kwaadwillende reeds beschikken over verhoogde rechten op het kwetsbare systeem.

Oplossingen: Apple heeft updates uitgebracht om de kwetsbaarheden te verhelpen in MacOS 12.7.6, 13.6.8 en 14.6. Zie bijgevoegde referenties voor meer informatie.

Kans: medium

Schade: high

CWE-1021: Improper Restriction of Rendered UI Layers or Frames

CWE-113: Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')

CWE-115: Misinterpretation of Input

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE-122: Heap-based Buffer Overflow

CWE-20: Improper Input Validation

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

CWE-284: Improper Access Control

CWE-295: Improper Certificate Validation

CWE-297: Improper Validation of Certificate with Host Mismatch

CWE-319: Cleartext Transmission of Sensitive Information

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

CWE-364: Signal Handler Race Condition

CWE-400: Uncontrolled Resource Consumption

CWE-401: Missing Release of Memory after Effective Lifetime

CWE-404: Improper Resource Shutdown or Release

CWE-770: Allocation of Resources Without Limits or Throttling

CWE-772: Missing Release of Resource after Effective Lifetime

CWE-787: Out-of-bounds Write

CVE-2023-6277

CWE-400 - Uncontrolled Resource Consumption

CVE-2023-27952

4.7 (Medium)


                        
                          CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
macos apple	`cpe:2.3:o:apple:macos::::::::`	—

CVE-2023-38709

CWE-113 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')

CVE-2023-52356

CWE-404 - Improper Resource Shutdown or Release

CVE-2024-2004

CWE-319 - Cleartext Transmission of Sensitive Information

CVE-2024-2379

CWE-295 - Improper Certificate Validation

CVE-2024-2398

CWE-772 - Missing Release of Resource after Effective Lifetime

CVE-2024-2466

CWE-295 - Improper Certificate Validation

CVE-2024-4558

CVE-2024-6387

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

CVE-2024-23261

CVE-2024-23296

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
macos apple	`cpe:2.3:o:apple:macos::::::::`	—

CVE-2024-24795

CVE-2024-27316

CWE-400 - Uncontrolled Resource Consumption

CVE-2024-27826

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
macos apple	`cpe:2.3:o:apple:macos::::::::`	—

CVE-2024-27862

CVE-2024-27863

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
macos apple	`cpe:2.3:o:apple:macos::::::::`	—

CVE-2024-27871

CVE-2024-27872

CVE-2024-27873

CWE-787 - Out-of-bounds Write

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
macos apple	`cpe:2.3:o:apple:macos::::::::`	—

CVE-2024-27877

CVE-2024-27878

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2024-27881

CVE-2024-27882

CVE-2024-27883

CVE-2024-40774

CVE-2024-40775

CVE-2024-40776

CVE-2024-40777

CVE-2024-40778

CVE-2024-40779

CVE-2024-40780

CVE-2024-40781

CVE-2024-40782

CVE-2024-40783

CVE-2024-40784

CVE-2024-40785

CVE-2024-40786

CVE-2024-40787

CVE-2024-40788

CVE-2024-40789

CVE-2024-40793

CVE-2024-40794

CVE-2024-40795

CVE-2024-40796

CVE-2024-40798

CVE-2024-40799

CVE-2024-40800

CVE-2024-40802

CVE-2024-40803

CVE-2024-40804

CVE-2024-40805

CVE-2024-40806

CVE-2024-40807

CVE-2024-40809

CVE-2024-40811

CVE-2024-40812

CVE-2024-40814

CVE-2024-40815

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
macos apple	`cpe:2.3:o:apple:macos::::::::`	—

CVE-2024-40816

CVE-2024-40817

CWE-1021 - Improper Restriction of Rendered UI Layers or Frames

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
macos apple	`cpe:2.3:o:apple:macos::::::::`	—

CVE-2024-40818

CVE-2024-40821

CVE-2024-40822

CVE-2024-40823

CVE-2024-40824

CVE-2024-40827

CVE-2024-40828

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
macos apple	`cpe:2.3:o:apple:macos::::::::`	—

CVE-2024-40829

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
macos apple	`cpe:2.3:o:apple:macos::::::::`	—

CVE-2024-40832

CVE-2024-40833

CWE-284 - Improper Access Control

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
macos apple	`cpe:2.3:o:apple:macos::::::::`	—

CVE-2024-40834

CVE-2024-40835

CWE-284 - Improper Access Control

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
macos apple	`cpe:2.3:o:apple:macos::::::::`	—

CVE-2024-40836

CWE-284 - Improper Access Control

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
macos apple	`cpe:2.3:o:apple:macos::::::::`	—

References

77 references

URL	Category
https://support.apple.com/en-us/HT214118	external
https://support.apple.com/en-us/HT214119	external
https://support.apple.com/en-us/HT214120	external
https://api.ncsc.nl/velma/v1/vulnerabilities/2023…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2023…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2023…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2023…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self

JSON

To clipboard

{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "nl",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n    NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n    NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n    This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
      },
      {
        "category": "description",
        "text": "Apple heeft kwetsbaarheden verholpen in MacOS.",
        "title": "Feiten"
      },
      {
        "category": "description",
        "text": "Een kwaadwillende kan de kwetsbaarheden misbruiken om een beveiligingsmaatregel te omzeilen, zichzelf verhoogde rechten toe te kennen, toegang te krijgen tot gevoelige gegevens, willekeurige code uit te voeren, mogelijk met kernel-rechten of een Denial-of-Service te veroorzaken.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide app te installeren en draaien, of een malafide link te volgen.\nVoor het uitvoeren van willekeurige code met kernel-rechten moet de kwaadwillende reeds beschikken over verhoogde rechten op het kwetsbare systeem.",
        "title": "Interpretaties"
      },
      {
        "category": "description",
        "text": "Apple heeft updates uitgebracht om de kwetsbaarheden te verhelpen in MacOS 12.7.6, 13.6.8 en 14.6. Zie bijgevoegde referenties voor meer informatie.",
        "title": "Oplossingen"
      },
      {
        "category": "general",
        "text": "medium",
        "title": "Kans"
      },
      {
        "category": "general",
        "text": "high",
        "title": "Schade"
      },
      {
        "category": "general",
        "text": "Improper Restriction of Rendered UI Layers or Frames",
        "title": "CWE-1021"
      },
      {
        "category": "general",
        "text": "Improper Neutralization of CRLF Sequences in HTTP Headers (\u0027HTTP Request/Response Splitting\u0027)",
        "title": "CWE-113"
      },
      {
        "category": "general",
        "text": "Misinterpretation of Input",
        "title": "CWE-115"
      },
      {
        "category": "general",
        "text": "Improper Restriction of Operations within the Bounds of a Memory Buffer",
        "title": "CWE-119"
      },
      {
        "category": "general",
        "text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
        "title": "CWE-120"
      },
      {
        "category": "general",
        "text": "Heap-based Buffer Overflow",
        "title": "CWE-122"
      },
      {
        "category": "general",
        "text": "Improper Input Validation",
        "title": "CWE-20"
      },
      {
        "category": "general",
        "text": "Exposure of Sensitive Information to an Unauthorized Actor",
        "title": "CWE-200"
      },
      {
        "category": "general",
        "text": "Improper Access Control",
        "title": "CWE-284"
      },
      {
        "category": "general",
        "text": "Improper Certificate Validation",
        "title": "CWE-295"
      },
      {
        "category": "general",
        "text": "Improper Validation of Certificate with Host Mismatch",
        "title": "CWE-297"
      },
      {
        "category": "general",
        "text": "Cleartext Transmission of Sensitive Information",
        "title": "CWE-319"
      },
      {
        "category": "general",
        "text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
        "title": "CWE-362"
      },
      {
        "category": "general",
        "text": "Signal Handler Race Condition",
        "title": "CWE-364"
      },
      {
        "category": "general",
        "text": "Uncontrolled Resource Consumption",
        "title": "CWE-400"
      },
      {
        "category": "general",
        "text": "Missing Release of Memory after Effective Lifetime",
        "title": "CWE-401"
      },
      {
        "category": "general",
        "text": "Improper Resource Shutdown or Release",
        "title": "CWE-404"
      },
      {
        "category": "general",
        "text": "Allocation of Resources Without Limits or Throttling",
        "title": "CWE-770"
      },
      {
        "category": "general",
        "text": "Missing Release of Resource after Effective Lifetime",
        "title": "CWE-772"
      },
      {
        "category": "general",
        "text": "Out-of-bounds Write",
        "title": "CWE-787"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "cert@ncsc.nl",
      "name": "Nationaal Cyber Security Centrum",
      "namespace": "https://www.ncsc.nl/"
    },
    "references": [
      {
        "category": "external",
        "summary": "Source - apple",
        "url": "https://support.apple.com/en-us/HT214118"
      },
      {
        "category": "external",
        "summary": "Source - apple",
        "url": "https://support.apple.com/en-us/HT214119"
      },
      {
        "category": "external",
        "summary": "Source - apple",
        "url": "https://support.apple.com/en-us/HT214120"
      }
    ],
    "title": "Kwetsbaarheden verholpen in Apple MacOS",
    "tracking": {
      "current_release_date": "2024-07-30T08:42:07.365674Z",
      "id": "NCSC-2024-0320",
      "initial_release_date": "2024-07-30T08:42:07.365674Z",
      "revision_history": [
        {
          "date": "2024-07-30T08:42:07.365674Z",
          "number": "0",
          "summary": "Initiele versie"
        }
      ],
      "status": "final",
      "version": "1.0.0"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "macos",
            "product": {
              "name": "macos",
              "product_id": "CSAFPID-2736",
              "product_identification_helper": {
                "cpe": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "macos",
            "product": {
              "name": "macos",
              "product_id": "CSAFPID-1513332",
              "product_identification_helper": {
                "cpe": "cpe:2.3:o:apple:macos:12.7.5:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "macos",
            "product": {
              "name": "macos",
              "product_id": "CSAFPID-1513334",
              "product_identification_helper": {
                "cpe": "cpe:2.3:o:apple:macos:13.6.7:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "macos",
            "product": {
              "name": "macos",
              "product_id": "CSAFPID-1513328",
              "product_identification_helper": {
                "cpe": "cpe:2.3:o:apple:macos:14.5:*:*:*:*:*:*:*"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "apple"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-6277",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "notes": [
        {
          "category": "other",
          "text": "Uncontrolled Resource Consumption",
          "title": "CWE-400"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-6277",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-6277.json"
        }
      ],
      "title": "CVE-2023-6277"
    },
    {
      "cve": "CVE-2023-27952",
      "product_status": {
        "known_affected": [
          "CSAFPID-2736"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-27952",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-27952.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2736"
          ]
        }
      ],
      "title": "CVE-2023-27952"
    },
    {
      "cve": "CVE-2023-38709",
      "cwe": {
        "id": "CWE-113",
        "name": "Improper Neutralization of CRLF Sequences in HTTP Headers (\u0027HTTP Request/Response Splitting\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Neutralization of CRLF Sequences in HTTP Headers (\u0027HTTP Request/Response Splitting\u0027)",
          "title": "CWE-113"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-38709",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-38709.json"
        }
      ],
      "title": "CVE-2023-38709"
    },
    {
      "cve": "CVE-2023-52356",
      "cwe": {
        "id": "CWE-404",
        "name": "Improper Resource Shutdown or Release"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Resource Shutdown or Release",
          "title": "CWE-404"
        },
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-52356",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-52356.json"
        }
      ],
      "title": "CVE-2023-52356"
    },
    {
      "cve": "CVE-2024-2004",
      "cwe": {
        "id": "CWE-319",
        "name": "Cleartext Transmission of Sensitive Information"
      },
      "notes": [
        {
          "category": "other",
          "text": "Cleartext Transmission of Sensitive Information",
          "title": "CWE-319"
        },
        {
          "category": "other",
          "text": "Misinterpretation of Input",
          "title": "CWE-115"
        },
        {
          "category": "other",
          "text": "Improper Input Validation",
          "title": "CWE-20"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-2004",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-2004.json"
        }
      ],
      "title": "CVE-2024-2004"
    },
    {
      "cve": "CVE-2024-2379",
      "cwe": {
        "id": "CWE-295",
        "name": "Improper Certificate Validation"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Certificate Validation",
          "title": "CWE-295"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-2379",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-2379.json"
        }
      ],
      "title": "CVE-2024-2379"
    },
    {
      "cve": "CVE-2024-2398",
      "cwe": {
        "id": "CWE-772",
        "name": "Missing Release of Resource after Effective Lifetime"
      },
      "notes": [
        {
          "category": "other",
          "text": "Missing Release of Resource after Effective Lifetime",
          "title": "CWE-772"
        },
        {
          "category": "other",
          "text": "Missing Release of Memory after Effective Lifetime",
          "title": "CWE-401"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-2398",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-2398.json"
        }
      ],
      "title": "CVE-2024-2398"
    },
    {
      "cve": "CVE-2024-2466",
      "cwe": {
        "id": "CWE-295",
        "name": "Improper Certificate Validation"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Certificate Validation",
          "title": "CWE-295"
        },
        {
          "category": "other",
          "text": "Improper Validation of Certificate with Host Mismatch",
          "title": "CWE-297"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-2466",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-2466.json"
        }
      ],
      "title": "CVE-2024-2466"
    },
    {
      "cve": "CVE-2024-4558",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-4558",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-4558.json"
        }
      ],
      "title": "CVE-2024-4558"
    },
    {
      "cve": "CVE-2024-6387",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
          "title": "CWE-362"
        },
        {
          "category": "other",
          "text": "Signal Handler Race Condition",
          "title": "CWE-364"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-6387",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-6387.json"
        }
      ],
      "title": "CVE-2024-6387"
    },
    {
      "cve": "CVE-2024-23261",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-23261",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-23261.json"
        }
      ],
      "title": "CVE-2024-23261"
    },
    {
      "cve": "CVE-2024-23296",
      "product_status": {
        "known_affected": [
          "CSAFPID-2736"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-23296",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-23296.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2736"
          ]
        }
      ],
      "title": "CVE-2024-23296"
    },
    {
      "cve": "CVE-2024-24795",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-24795",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-24795.json"
        }
      ],
      "title": "CVE-2024-24795"
    },
    {
      "cve": "CVE-2024-27316",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "notes": [
        {
          "category": "other",
          "text": "Uncontrolled Resource Consumption",
          "title": "CWE-400"
        },
        {
          "category": "other",
          "text": "Allocation of Resources Without Limits or Throttling",
          "title": "CWE-770"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-27316",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27316.json"
        }
      ],
      "title": "CVE-2024-27316"
    },
    {
      "cve": "CVE-2024-27826",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Restriction of Operations within the Bounds of a Memory Buffer",
          "title": "CWE-119"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2736"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-27826",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27826.json"
        }
      ],
      "title": "CVE-2024-27826"
    },
    {
      "cve": "CVE-2024-27862",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-27862",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27862.json"
        }
      ],
      "title": "CVE-2024-27862"
    },
    {
      "cve": "CVE-2024-27863",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "notes": [
        {
          "category": "other",
          "text": "Exposure of Sensitive Information to an Unauthorized Actor",
          "title": "CWE-200"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2736"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-27863",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27863.json"
        }
      ],
      "title": "CVE-2024-27863"
    },
    {
      "cve": "CVE-2024-27871",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-27871",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27871.json"
        }
      ],
      "title": "CVE-2024-27871"
    },
    {
      "cve": "CVE-2024-27872",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-27872",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27872.json"
        }
      ],
      "title": "CVE-2024-27872"
    },
    {
      "cve": "CVE-2024-27873",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Write",
          "title": "CWE-787"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2736"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-27873",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27873.json"
        }
      ],
      "title": "CVE-2024-27873"
    },
    {
      "cve": "CVE-2024-27877",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-27877",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27877.json"
        }
      ],
      "title": "CVE-2024-27877"
    },
    {
      "cve": "CVE-2024-27878",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
          "title": "CWE-120"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-27878",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27878.json"
        }
      ],
      "title": "CVE-2024-27878"
    },
    {
      "cve": "CVE-2024-27881",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-27881",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27881.json"
        }
      ],
      "title": "CVE-2024-27881"
    },
    {
      "cve": "CVE-2024-27882",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-27882",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27882.json"
        }
      ],
      "title": "CVE-2024-27882"
    },
    {
      "cve": "CVE-2024-27883",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-27883",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27883.json"
        }
      ],
      "title": "CVE-2024-27883"
    },
    {
      "cve": "CVE-2024-40774",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40774",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40774.json"
        }
      ],
      "title": "CVE-2024-40774"
    },
    {
      "cve": "CVE-2024-40775",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40775",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40775.json"
        }
      ],
      "title": "CVE-2024-40775"
    },
    {
      "cve": "CVE-2024-40776",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40776",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40776.json"
        }
      ],
      "title": "CVE-2024-40776"
    },
    {
      "cve": "CVE-2024-40777",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40777",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40777.json"
        }
      ],
      "title": "CVE-2024-40777"
    },
    {
      "cve": "CVE-2024-40778",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40778",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40778.json"
        }
      ],
      "title": "CVE-2024-40778"
    },
    {
      "cve": "CVE-2024-40779",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40779",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40779.json"
        }
      ],
      "title": "CVE-2024-40779"
    },
    {
      "cve": "CVE-2024-40780",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40780",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40780.json"
        }
      ],
      "title": "CVE-2024-40780"
    },
    {
      "cve": "CVE-2024-40781",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40781",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40781.json"
        }
      ],
      "title": "CVE-2024-40781"
    },
    {
      "cve": "CVE-2024-40782",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40782",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40782.json"
        }
      ],
      "title": "CVE-2024-40782"
    },
    {
      "cve": "CVE-2024-40783",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40783",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40783.json"
        }
      ],
      "title": "CVE-2024-40783"
    },
    {
      "cve": "CVE-2024-40784",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40784",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40784.json"
        }
      ],
      "title": "CVE-2024-40784"
    },
    {
      "cve": "CVE-2024-40785",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40785",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40785.json"
        }
      ],
      "title": "CVE-2024-40785"
    },
    {
      "cve": "CVE-2024-40786",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40786",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40786.json"
        }
      ],
      "title": "CVE-2024-40786"
    },
    {
      "cve": "CVE-2024-40787",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40787",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40787.json"
        }
      ],
      "title": "CVE-2024-40787"
    },
    {
      "cve": "CVE-2024-40788",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40788",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40788.json"
        }
      ],
      "title": "CVE-2024-40788"
    },
    {
      "cve": "CVE-2024-40789",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40789",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40789.json"
        }
      ],
      "title": "CVE-2024-40789"
    },
    {
      "cve": "CVE-2024-40793",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40793",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40793.json"
        }
      ],
      "title": "CVE-2024-40793"
    },
    {
      "cve": "CVE-2024-40794",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40794",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40794.json"
        }
      ],
      "title": "CVE-2024-40794"
    },
    {
      "cve": "CVE-2024-40795",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40795",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40795.json"
        }
      ],
      "title": "CVE-2024-40795"
    },
    {
      "cve": "CVE-2024-40796",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40796",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40796.json"
        }
      ],
      "title": "CVE-2024-40796"
    },
    {
      "cve": "CVE-2024-40798",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40798",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40798.json"
        }
      ],
      "title": "CVE-2024-40798"
    },
    {
      "cve": "CVE-2024-40799",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40799",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40799.json"
        }
      ],
      "title": "CVE-2024-40799"
    },
    {
      "cve": "CVE-2024-40800",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40800",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40800.json"
        }
      ],
      "title": "CVE-2024-40800"
    },
    {
      "cve": "CVE-2024-40802",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40802",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40802.json"
        }
      ],
      "title": "CVE-2024-40802"
    },
    {
      "cve": "CVE-2024-40803",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40803",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40803.json"
        }
      ],
      "title": "CVE-2024-40803"
    },
    {
      "cve": "CVE-2024-40804",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40804",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40804.json"
        }
      ],
      "title": "CVE-2024-40804"
    },
    {
      "cve": "CVE-2024-40805",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40805",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40805.json"
        }
      ],
      "title": "CVE-2024-40805"
    },
    {
      "cve": "CVE-2024-40806",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40806",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40806.json"
        }
      ],
      "title": "CVE-2024-40806"
    },
    {
      "cve": "CVE-2024-40807",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40807",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40807.json"
        }
      ],
      "title": "CVE-2024-40807"
    },
    {
      "cve": "CVE-2024-40809",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40809",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40809.json"
        }
      ],
      "title": "CVE-2024-40809"
    },
    {
      "cve": "CVE-2024-40811",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40811",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40811.json"
        }
      ],
      "title": "CVE-2024-40811"
    },
    {
      "cve": "CVE-2024-40812",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40812",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40812.json"
        }
      ],
      "title": "CVE-2024-40812"
    },
    {
      "cve": "CVE-2024-40814",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40814",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40814.json"
        }
      ],
      "title": "CVE-2024-40814"
    },
    {
      "cve": "CVE-2024-40815",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
          "title": "CWE-362"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2736"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40815",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40815.json"
        }
      ],
      "title": "CVE-2024-40815"
    },
    {
      "cve": "CVE-2024-40816",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40816",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40816.json"
        }
      ],
      "title": "CVE-2024-40816"
    },
    {
      "cve": "CVE-2024-40817",
      "cwe": {
        "id": "CWE-1021",
        "name": "Improper Restriction of Rendered UI Layers or Frames"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Restriction of Rendered UI Layers or Frames",
          "title": "CWE-1021"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2736"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40817",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40817.json"
        }
      ],
      "title": "CVE-2024-40817"
    },
    {
      "cve": "CVE-2024-40818",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40818",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40818.json"
        }
      ],
      "title": "CVE-2024-40818"
    },
    {
      "cve": "CVE-2024-40821",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40821",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40821.json"
        }
      ],
      "title": "CVE-2024-40821"
    },
    {
      "cve": "CVE-2024-40822",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40822",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40822.json"
        }
      ],
      "title": "CVE-2024-40822"
    },
    {
      "cve": "CVE-2024-40823",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40823",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40823.json"
        }
      ],
      "title": "CVE-2024-40823"
    },
    {
      "cve": "CVE-2024-40824",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40824",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40824.json"
        }
      ],
      "title": "CVE-2024-40824"
    },
    {
      "cve": "CVE-2024-40827",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40827",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40827.json"
        }
      ],
      "title": "CVE-2024-40827"
    },
    {
      "cve": "CVE-2024-40828",
      "product_status": {
        "known_affected": [
          "CSAFPID-2736"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40828",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40828.json"
        }
      ],
      "title": "CVE-2024-40828"
    },
    {
      "cve": "CVE-2024-40829",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "notes": [
        {
          "category": "other",
          "text": "Exposure of Sensitive Information to an Unauthorized Actor",
          "title": "CWE-200"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2736"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40829",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40829.json"
        }
      ],
      "title": "CVE-2024-40829"
    },
    {
      "cve": "CVE-2024-40832",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40832",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40832.json"
        }
      ],
      "title": "CVE-2024-40832"
    },
    {
      "cve": "CVE-2024-40833",
      "cwe": {
        "id": "CWE-284",
        "name": "Improper Access Control"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Access Control",
          "title": "CWE-284"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2736"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40833",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40833.json"
        }
      ],
      "title": "CVE-2024-40833"
    },
    {
      "cve": "CVE-2024-40834",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40834",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40834.json"
        }
      ],
      "title": "CVE-2024-40834"
    },
    {
      "cve": "CVE-2024-40835",
      "cwe": {
        "id": "CWE-284",
        "name": "Improper Access Control"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Access Control",
          "title": "CWE-284"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2736"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40835",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40835.json"
        }
      ],
      "title": "CVE-2024-40835"
    },
    {
      "cve": "CVE-2024-40836",
      "cwe": {
        "id": "CWE-284",
        "name": "Improper Access Control"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Access Control",
          "title": "CWE-284"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2736"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40836",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40836.json"
        }
      ],
      "title": "CVE-2024-40836"
    }
  ]
}

WID-SEC-W-2024-1724

Vulnerability from csaf_certbund - Published: 2024-07-29 22:00 - Updated: 2025-03-24 23:00

Summary

Apple iOS und iPadOS: Mehrere Schwachstellen

Severity

Mittel

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung: Das Apple iOS (vormals iPhone OS) ist das Betriebssystem für das von Apple entwickelte Smartphone iPhone, iPad und iPod Touch. Das Apple iPadOS ist das Betriebssystem für das von Apple entwickelte iPad.

Angriff: Ein Angreifer kann mehrere Schwachstellen in Apple iOS und Apple iPadOS ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu ändern und vertrauliche Informationen offenzulegen.

Betroffene Betriebssysteme: - iPhoneOS - Sonstiges

CVE-2023-52356

Affected products

Known affected 4 products

Product	Identifier	Version	Remediation
Apple iOS <17.6 Apple / iOS		<17.6
Apple iOS <16.7.9 Apple / iOS		<16.7.9
Apple iPadOS <16.7.9 Apple / iPadOS		<16.7.9
Apple iPadOS <17.6 Apple / iPadOS		<17.6

CVE-2023-6277

Affected products

Known affected 4 products

Product	Identifier	Version	Remediation
Apple iOS <17.6 Apple / iOS		<17.6
Apple iOS <16.7.9 Apple / iOS		<16.7.9
Apple iPadOS <16.7.9 Apple / iPadOS		<16.7.9
Apple iPadOS <17.6 Apple / iPadOS		<17.6

CVE-2024-27863

Affected products

Known affected 4 products

Product	Identifier	Version	Remediation
Apple iOS <17.6 Apple / iOS		<17.6
Apple iOS <16.7.9 Apple / iOS		<16.7.9
Apple iPadOS <16.7.9 Apple / iPadOS		<16.7.9
Apple iPadOS <17.6 Apple / iPadOS		<17.6

CVE-2024-27871

Affected products

Known affected 4 products

Product	Identifier	Version	Remediation
Apple iOS <17.6 Apple / iOS		<17.6
Apple iOS <16.7.9 Apple / iOS		<16.7.9
Apple iPadOS <16.7.9 Apple / iPadOS		<16.7.9
Apple iPadOS <17.6 Apple / iPadOS		<17.6

CVE-2024-27873

Affected products

Known affected 4 products

Product	Identifier	Version	Remediation
Apple iOS <17.6 Apple / iOS		<17.6
Apple iOS <16.7.9 Apple / iOS		<16.7.9
Apple iPadOS <16.7.9 Apple / iPadOS		<16.7.9
Apple iPadOS <17.6 Apple / iPadOS		<17.6

CVE-2024-40774

Affected products

Known affected 4 products

Product	Identifier	Version	Remediation
Apple iOS <17.6 Apple / iOS		<17.6
Apple iOS <16.7.9 Apple / iOS		<16.7.9
Apple iPadOS <16.7.9 Apple / iPadOS		<16.7.9
Apple iPadOS <17.6 Apple / iPadOS		<17.6

CVE-2024-40776

Affected products

Known affected 4 products

Product	Identifier	Version	Remediation
Apple iOS <17.6 Apple / iOS		<17.6
Apple iOS <16.7.9 Apple / iOS		<16.7.9
Apple iPadOS <16.7.9 Apple / iPadOS		<16.7.9
Apple iPadOS <17.6 Apple / iPadOS		<17.6

CVE-2024-40777

Affected products

Known affected 4 products

Product	Identifier	Version	Remediation
Apple iOS <17.6 Apple / iOS		<17.6
Apple iOS <16.7.9 Apple / iOS		<16.7.9
Apple iPadOS <16.7.9 Apple / iPadOS		<16.7.9
Apple iPadOS <17.6 Apple / iPadOS		<17.6

CVE-2024-40778

Affected products

Known affected 4 products

Product	Identifier	Version	Remediation
Apple iOS <17.6 Apple / iOS		<17.6
Apple iOS <16.7.9 Apple / iOS		<16.7.9
Apple iPadOS <16.7.9 Apple / iPadOS		<16.7.9
Apple iPadOS <17.6 Apple / iPadOS		<17.6

CVE-2024-40779

Affected products

Known affected 4 products

Product	Identifier	Version	Remediation
Apple iOS <17.6 Apple / iOS		<17.6
Apple iOS <16.7.9 Apple / iOS		<16.7.9
Apple iPadOS <16.7.9 Apple / iPadOS		<16.7.9
Apple iPadOS <17.6 Apple / iPadOS		<17.6

CVE-2024-40780

Affected products

Known affected 4 products

Product	Identifier	Version	Remediation
Apple iOS <17.6 Apple / iOS		<17.6
Apple iOS <16.7.9 Apple / iOS		<16.7.9
Apple iPadOS <16.7.9 Apple / iPadOS		<16.7.9
Apple iPadOS <17.6 Apple / iPadOS		<17.6

CVE-2024-40782

Affected products

Known affected 4 products

Product	Identifier	Version	Remediation
Apple iOS <17.6 Apple / iOS		<17.6
Apple iOS <16.7.9 Apple / iOS		<16.7.9
Apple iPadOS <16.7.9 Apple / iPadOS		<16.7.9
Apple iPadOS <17.6 Apple / iPadOS		<17.6

CVE-2024-40784

Affected products

Known affected 4 products

Product	Identifier	Version	Remediation
Apple iOS <17.6 Apple / iOS		<17.6
Apple iOS <16.7.9 Apple / iOS		<16.7.9
Apple iPadOS <16.7.9 Apple / iPadOS		<16.7.9
Apple iPadOS <17.6 Apple / iPadOS		<17.6

CVE-2024-40785

Affected products

Known affected 4 products

Product	Identifier	Version	Remediation
Apple iOS <17.6 Apple / iOS		<17.6
Apple iOS <16.7.9 Apple / iOS		<16.7.9
Apple iPadOS <16.7.9 Apple / iPadOS		<16.7.9
Apple iPadOS <17.6 Apple / iPadOS		<17.6

CVE-2024-40786

Affected products

Known affected 4 products

Product	Identifier	Version	Remediation
Apple iOS <17.6 Apple / iOS		<17.6
Apple iOS <16.7.9 Apple / iOS		<16.7.9
Apple iPadOS <16.7.9 Apple / iPadOS		<16.7.9
Apple iPadOS <17.6 Apple / iPadOS		<17.6

CVE-2024-40787

Affected products

Known affected 4 products

Product	Identifier	Version	Remediation
Apple iOS <17.6 Apple / iOS		<17.6
Apple iOS <16.7.9 Apple / iOS		<16.7.9
Apple iPadOS <16.7.9 Apple / iPadOS		<16.7.9
Apple iPadOS <17.6 Apple / iPadOS		<17.6

CVE-2024-40788

Affected products

Known affected 4 products

Product	Identifier	Version	Remediation
Apple iOS <17.6 Apple / iOS		<17.6
Apple iOS <16.7.9 Apple / iOS		<16.7.9
Apple iPadOS <16.7.9 Apple / iPadOS		<16.7.9
Apple iPadOS <17.6 Apple / iPadOS		<17.6

CVE-2024-40789

Affected products

Known affected 4 products

Product	Identifier	Version	Remediation
Apple iOS <17.6 Apple / iOS		<17.6
Apple iOS <16.7.9 Apple / iOS		<16.7.9
Apple iPadOS <16.7.9 Apple / iPadOS		<16.7.9
Apple iPadOS <17.6 Apple / iPadOS		<17.6

CVE-2024-40793

Affected products

Known affected 4 products

Product	Identifier	Version	Remediation
Apple iOS <17.6 Apple / iOS		<17.6
Apple iOS <16.7.9 Apple / iOS		<16.7.9
Apple iPadOS <16.7.9 Apple / iPadOS		<16.7.9
Apple iPadOS <17.6 Apple / iPadOS		<17.6

CVE-2024-40794

Affected products

Known affected 4 products

Product	Identifier	Version	Remediation
Apple iOS <17.6 Apple / iOS		<17.6
Apple iOS <16.7.9 Apple / iOS		<16.7.9
Apple iPadOS <16.7.9 Apple / iPadOS		<16.7.9
Apple iPadOS <17.6 Apple / iPadOS		<17.6

CVE-2024-40795

Affected products

Known affected 4 products

Product	Identifier	Version	Remediation
Apple iOS <17.6 Apple / iOS		<17.6
Apple iOS <16.7.9 Apple / iOS		<16.7.9
Apple iPadOS <16.7.9 Apple / iPadOS		<16.7.9
Apple iPadOS <17.6 Apple / iPadOS		<17.6

CVE-2024-40796

Affected products

Known affected 4 products

Product	Identifier	Version	Remediation
Apple iOS <17.6 Apple / iOS		<17.6
Apple iOS <16.7.9 Apple / iOS		<16.7.9
Apple iPadOS <16.7.9 Apple / iPadOS		<16.7.9
Apple iPadOS <17.6 Apple / iPadOS		<17.6

CVE-2024-40798

Affected products

Known affected 4 products

Product	Identifier	Version	Remediation
Apple iOS <17.6 Apple / iOS		<17.6
Apple iOS <16.7.9 Apple / iOS		<16.7.9
Apple iPadOS <16.7.9 Apple / iPadOS		<16.7.9
Apple iPadOS <17.6 Apple / iPadOS		<17.6

CVE-2024-40799

Affected products

Known affected 4 products

Product	Identifier	Version	Remediation
Apple iOS <17.6 Apple / iOS		<17.6
Apple iOS <16.7.9 Apple / iOS		<16.7.9
Apple iPadOS <16.7.9 Apple / iPadOS		<16.7.9
Apple iPadOS <17.6 Apple / iPadOS		<17.6

CVE-2024-40805

Affected products

Known affected 4 products

Product	Identifier	Version	Remediation
Apple iOS <17.6 Apple / iOS		<17.6
Apple iOS <16.7.9 Apple / iOS		<16.7.9
Apple iPadOS <16.7.9 Apple / iPadOS		<16.7.9
Apple iPadOS <17.6 Apple / iPadOS		<17.6

CVE-2024-40806

Affected products

Known affected 4 products

Product	Identifier	Version	Remediation
Apple iOS <17.6 Apple / iOS		<17.6
Apple iOS <16.7.9 Apple / iOS		<16.7.9
Apple iPadOS <16.7.9 Apple / iPadOS		<16.7.9
Apple iPadOS <17.6 Apple / iPadOS		<17.6

CVE-2024-40809

Affected products

Known affected 4 products

Product	Identifier	Version	Remediation
Apple iOS <17.6 Apple / iOS		<17.6
Apple iOS <16.7.9 Apple / iOS		<16.7.9
Apple iPadOS <16.7.9 Apple / iPadOS		<16.7.9
Apple iPadOS <17.6 Apple / iPadOS		<17.6

CVE-2024-40812

Affected products

Known affected 4 products

Product	Identifier	Version	Remediation
Apple iOS <17.6 Apple / iOS		<17.6
Apple iOS <16.7.9 Apple / iOS		<16.7.9
Apple iPadOS <16.7.9 Apple / iPadOS		<16.7.9
Apple iPadOS <17.6 Apple / iPadOS		<17.6

CVE-2024-40813

Affected products

Known affected 4 products

Product	Identifier	Version	Remediation
Apple iOS <17.6 Apple / iOS		<17.6
Apple iOS <16.7.9 Apple / iOS		<16.7.9
Apple iPadOS <16.7.9 Apple / iPadOS		<16.7.9
Apple iPadOS <17.6 Apple / iPadOS		<17.6

CVE-2024-40815

Affected products

Known affected 4 products

Product	Identifier	Version	Remediation
Apple iOS <17.6 Apple / iOS		<17.6
Apple iOS <16.7.9 Apple / iOS		<16.7.9
Apple iPadOS <16.7.9 Apple / iPadOS		<16.7.9
Apple iPadOS <17.6 Apple / iPadOS		<17.6

CVE-2024-40818

Affected products

Known affected 4 products

Product	Identifier	Version	Remediation
Apple iOS <17.6 Apple / iOS		<17.6
Apple iOS <16.7.9 Apple / iOS		<16.7.9
Apple iPadOS <16.7.9 Apple / iPadOS		<16.7.9
Apple iPadOS <17.6 Apple / iPadOS		<17.6

CVE-2024-40822

Affected products

Known affected 4 products

Product	Identifier	Version	Remediation
Apple iOS <17.6 Apple / iOS		<17.6
Apple iOS <16.7.9 Apple / iOS		<16.7.9
Apple iPadOS <16.7.9 Apple / iPadOS		<16.7.9
Apple iPadOS <17.6 Apple / iPadOS		<17.6

CVE-2024-40824

Affected products

Known affected 4 products

Product	Identifier	Version	Remediation
Apple iOS <17.6 Apple / iOS		<17.6
Apple iOS <16.7.9 Apple / iOS		<16.7.9
Apple iPadOS <16.7.9 Apple / iPadOS		<16.7.9
Apple iPadOS <17.6 Apple / iPadOS		<17.6

CVE-2024-40829

Affected products

Known affected 4 products

Product	Identifier	Version	Remediation
Apple iOS <17.6 Apple / iOS		<17.6
Apple iOS <16.7.9 Apple / iOS		<16.7.9
Apple iPadOS <16.7.9 Apple / iPadOS		<16.7.9
Apple iPadOS <17.6 Apple / iPadOS		<17.6

CVE-2024-40833

Affected products

Known affected 4 products

Product	Identifier	Version	Remediation
Apple iOS <17.6 Apple / iOS		<17.6
Apple iOS <16.7.9 Apple / iOS		<16.7.9
Apple iPadOS <16.7.9 Apple / iPadOS		<16.7.9
Apple iPadOS <17.6 Apple / iPadOS		<17.6

CVE-2024-40835

Affected products

Known affected 4 products

Product	Identifier	Version	Remediation
Apple iOS <17.6 Apple / iOS		<17.6
Apple iOS <16.7.9 Apple / iOS		<16.7.9
Apple iPadOS <16.7.9 Apple / iPadOS		<16.7.9
Apple iPadOS <17.6 Apple / iPadOS		<17.6

CVE-2024-40836

Affected products

Known affected 4 products

Product	Identifier	Version	Remediation
Apple iOS <17.6 Apple / iOS		<17.6
Apple iOS <16.7.9 Apple / iOS		<16.7.9
Apple iPadOS <16.7.9 Apple / iPadOS		<16.7.9
Apple iPadOS <17.6 Apple / iPadOS		<17.6

CVE-2024-44205

Affected products

Known affected 4 products

Product	Identifier	Version	Remediation
Apple iOS <17.6 Apple / iOS		<17.6
Apple iOS <16.7.9 Apple / iOS		<16.7.9
Apple iPadOS <16.7.9 Apple / iPadOS		<16.7.9
Apple iPadOS <17.6 Apple / iPadOS		<17.6

CVE-2024-44206

Affected products

Known affected 4 products

Product	Identifier	Version	Remediation
Apple iOS <17.6 Apple / iOS		<17.6
Apple iOS <16.7.9 Apple / iOS		<16.7.9
Apple iPadOS <16.7.9 Apple / iPadOS		<16.7.9
Apple iPadOS <17.6 Apple / iPadOS		<17.6

CVE-2024-4558

Affected products

Known affected 4 products

Product	Identifier	Version	Remediation
Apple iOS <17.6 Apple / iOS		<17.6
Apple iOS <16.7.9 Apple / iOS		<16.7.9
Apple iPadOS <16.7.9 Apple / iPadOS		<16.7.9
Apple iPadOS <17.6 Apple / iPadOS		<17.6

CVE-2024-54551

Affected products

Known affected 4 products

Product	Identifier	Version	Remediation
Apple iOS <17.6 Apple / iOS		<17.6
Apple iOS <16.7.9 Apple / iOS		<16.7.9
Apple iPadOS <16.7.9 Apple / iPadOS		<16.7.9
Apple iPadOS <17.6 Apple / iPadOS		<17.6

CVE-2024-54564

Affected products

Known affected 4 products

Product	Identifier	Version	Remediation
Apple iOS <17.6 Apple / iOS		<17.6
Apple iOS <16.7.9 Apple / iOS		<16.7.9
Apple iPadOS <16.7.9 Apple / iPadOS		<16.7.9
Apple iPadOS <17.6 Apple / iPadOS		<17.6

References

4 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://support.apple.com/en-us/HT214117	external
https://support.apple.com/en-us/HT214116	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "mittel"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Das Apple iOS (vormals iPhone OS) ist das Betriebssystem f\u00fcr das von Apple entwickelte Smartphone iPhone, iPad und iPod Touch.\r\nDas Apple iPadOS ist das Betriebssystem f\u00fcr das von Apple entwickelte iPad.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein Angreifer kann mehrere Schwachstellen in Apple iOS und Apple iPadOS ausnutzen, um einen Cross-Site Scripting Angriff durchzuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, Daten zu \u00e4ndern und vertrauliche Informationen offenzulegen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- iPhoneOS\n- Sonstiges",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2024-1724 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1724.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2024-1724 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1724"
      },
      {
        "category": "external",
        "summary": "Apple security Update vom 2024-07-29",
        "url": "https://support.apple.com/en-us/HT214117"
      },
      {
        "category": "external",
        "summary": "Apple security Update vom 2024-07-29",
        "url": "https://support.apple.com/en-us/HT214116"
      }
    ],
    "source_lang": "en-US",
    "title": "Apple iOS und iPadOS: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2025-03-24T23:00:00.000+00:00",
      "generator": {
        "date": "2025-03-25T12:32:49.048+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.12"
        }
      },
      "id": "WID-SEC-W-2024-1724",
      "initial_release_date": "2024-07-29T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2024-07-29T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2024-10-15T22:00:00.000+00:00",
          "number": "2",
          "summary": "CVE erg\u00e4nzt"
        },
        {
          "date": "2025-03-24T23:00:00.000+00:00",
          "number": "3",
          "summary": "CVE-2024-54551, CVE-2024-54564 erg\u00e4nzt"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c17.6",
                "product": {
                  "name": "Apple iOS \u003c17.6",
                  "product_id": "T036494"
                }
              },
              {
                "category": "product_version",
                "name": "17.6",
                "product": {
                  "name": "Apple iOS 17.6",
                  "product_id": "T036494-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:apple:iphone_os:17.6"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c16.7.9",
                "product": {
                  "name": "Apple iOS \u003c16.7.9",
                  "product_id": "T036495"
                }
              },
              {
                "category": "product_version",
                "name": "16.7.9",
                "product": {
                  "name": "Apple iOS 16.7.9",
                  "product_id": "T036495-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:apple:iphone_os:16.7.9"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "iOS"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c16.7.9",
                "product": {
                  "name": "Apple iPadOS \u003c16.7.9",
                  "product_id": "T036496"
                }
              },
              {
                "category": "product_version",
                "name": "16.7.9",
                "product": {
                  "name": "Apple iPadOS 16.7.9",
                  "product_id": "T036496-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:apple:ipados:16.7.9"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c17.6",
                "product": {
                  "name": "Apple iPadOS \u003c17.6",
                  "product_id": "T036497"
                }
              },
              {
                "category": "product_version",
                "name": "17.6",
                "product": {
                  "name": "Apple iPadOS 17.6",
                  "product_id": "T036497-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:apple:ipados:17.6"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "iPadOS"
          }
        ],
        "category": "vendor",
        "name": "Apple"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-52356",
      "product_status": {
        "known_affected": [
          "T036494",
          "T036495",
          "T036496",
          "T036497"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2023-52356"
    },
    {
      "cve": "CVE-2023-6277",
      "product_status": {
        "known_affected": [
          "T036494",
          "T036495",
          "T036496",
          "T036497"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2023-6277"
    },
    {
      "cve": "CVE-2024-27863",
      "product_status": {
        "known_affected": [
          "T036494",
          "T036495",
          "T036496",
          "T036497"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-27863"
    },
    {
      "cve": "CVE-2024-27871",
      "product_status": {
        "known_affected": [
          "T036494",
          "T036495",
          "T036496",
          "T036497"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-27871"
    },
    {
      "cve": "CVE-2024-27873",
      "product_status": {
        "known_affected": [
          "T036494",
          "T036495",
          "T036496",
          "T036497"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-27873"
    },
    {
      "cve": "CVE-2024-40774",
      "product_status": {
        "known_affected": [
          "T036494",
          "T036495",
          "T036496",
          "T036497"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40774"
    },
    {
      "cve": "CVE-2024-40776",
      "product_status": {
        "known_affected": [
          "T036494",
          "T036495",
          "T036496",
          "T036497"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40776"
    },
    {
      "cve": "CVE-2024-40777",
      "product_status": {
        "known_affected": [
          "T036494",
          "T036495",
          "T036496",
          "T036497"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40777"
    },
    {
      "cve": "CVE-2024-40778",
      "product_status": {
        "known_affected": [
          "T036494",
          "T036495",
          "T036496",
          "T036497"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40778"
    },
    {
      "cve": "CVE-2024-40779",
      "product_status": {
        "known_affected": [
          "T036494",
          "T036495",
          "T036496",
          "T036497"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40779"
    },
    {
      "cve": "CVE-2024-40780",
      "product_status": {
        "known_affected": [
          "T036494",
          "T036495",
          "T036496",
          "T036497"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40780"
    },
    {
      "cve": "CVE-2024-40782",
      "product_status": {
        "known_affected": [
          "T036494",
          "T036495",
          "T036496",
          "T036497"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40782"
    },
    {
      "cve": "CVE-2024-40784",
      "product_status": {
        "known_affected": [
          "T036494",
          "T036495",
          "T036496",
          "T036497"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40784"
    },
    {
      "cve": "CVE-2024-40785",
      "product_status": {
        "known_affected": [
          "T036494",
          "T036495",
          "T036496",
          "T036497"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40785"
    },
    {
      "cve": "CVE-2024-40786",
      "product_status": {
        "known_affected": [
          "T036494",
          "T036495",
          "T036496",
          "T036497"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40786"
    },
    {
      "cve": "CVE-2024-40787",
      "product_status": {
        "known_affected": [
          "T036494",
          "T036495",
          "T036496",
          "T036497"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40787"
    },
    {
      "cve": "CVE-2024-40788",
      "product_status": {
        "known_affected": [
          "T036494",
          "T036495",
          "T036496",
          "T036497"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40788"
    },
    {
      "cve": "CVE-2024-40789",
      "product_status": {
        "known_affected": [
          "T036494",
          "T036495",
          "T036496",
          "T036497"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40789"
    },
    {
      "cve": "CVE-2024-40793",
      "product_status": {
        "known_affected": [
          "T036494",
          "T036495",
          "T036496",
          "T036497"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40793"
    },
    {
      "cve": "CVE-2024-40794",
      "product_status": {
        "known_affected": [
          "T036494",
          "T036495",
          "T036496",
          "T036497"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40794"
    },
    {
      "cve": "CVE-2024-40795",
      "product_status": {
        "known_affected": [
          "T036494",
          "T036495",
          "T036496",
          "T036497"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40795"
    },
    {
      "cve": "CVE-2024-40796",
      "product_status": {
        "known_affected": [
          "T036494",
          "T036495",
          "T036496",
          "T036497"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40796"
    },
    {
      "cve": "CVE-2024-40798",
      "product_status": {
        "known_affected": [
          "T036494",
          "T036495",
          "T036496",
          "T036497"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40798"
    },
    {
      "cve": "CVE-2024-40799",
      "product_status": {
        "known_affected": [
          "T036494",
          "T036495",
          "T036496",
          "T036497"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40799"
    },
    {
      "cve": "CVE-2024-40805",
      "product_status": {
        "known_affected": [
          "T036494",
          "T036495",
          "T036496",
          "T036497"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40805"
    },
    {
      "cve": "CVE-2024-40806",
      "product_status": {
        "known_affected": [
          "T036494",
          "T036495",
          "T036496",
          "T036497"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40806"
    },
    {
      "cve": "CVE-2024-40809",
      "product_status": {
        "known_affected": [
          "T036494",
          "T036495",
          "T036496",
          "T036497"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40809"
    },
    {
      "cve": "CVE-2024-40812",
      "product_status": {
        "known_affected": [
          "T036494",
          "T036495",
          "T036496",
          "T036497"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40812"
    },
    {
      "cve": "CVE-2024-40813",
      "product_status": {
        "known_affected": [
          "T036494",
          "T036495",
          "T036496",
          "T036497"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40813"
    },
    {
      "cve": "CVE-2024-40815",
      "product_status": {
        "known_affected": [
          "T036494",
          "T036495",
          "T036496",
          "T036497"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40815"
    },
    {
      "cve": "CVE-2024-40818",
      "product_status": {
        "known_affected": [
          "T036494",
          "T036495",
          "T036496",
          "T036497"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40818"
    },
    {
      "cve": "CVE-2024-40822",
      "product_status": {
        "known_affected": [
          "T036494",
          "T036495",
          "T036496",
          "T036497"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40822"
    },
    {
      "cve": "CVE-2024-40824",
      "product_status": {
        "known_affected": [
          "T036494",
          "T036495",
          "T036496",
          "T036497"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40824"
    },
    {
      "cve": "CVE-2024-40829",
      "product_status": {
        "known_affected": [
          "T036494",
          "T036495",
          "T036496",
          "T036497"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40829"
    },
    {
      "cve": "CVE-2024-40833",
      "product_status": {
        "known_affected": [
          "T036494",
          "T036495",
          "T036496",
          "T036497"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40833"
    },
    {
      "cve": "CVE-2024-40835",
      "product_status": {
        "known_affected": [
          "T036494",
          "T036495",
          "T036496",
          "T036497"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40835"
    },
    {
      "cve": "CVE-2024-40836",
      "product_status": {
        "known_affected": [
          "T036494",
          "T036495",
          "T036496",
          "T036497"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40836"
    },
    {
      "cve": "CVE-2024-44205",
      "product_status": {
        "known_affected": [
          "T036494",
          "T036495",
          "T036496",
          "T036497"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-44205"
    },
    {
      "cve": "CVE-2024-44206",
      "product_status": {
        "known_affected": [
          "T036494",
          "T036495",
          "T036496",
          "T036497"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-44206"
    },
    {
      "cve": "CVE-2024-4558",
      "product_status": {
        "known_affected": [
          "T036494",
          "T036495",
          "T036496",
          "T036497"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-4558"
    },
    {
      "cve": "CVE-2024-54551",
      "product_status": {
        "known_affected": [
          "T036494",
          "T036495",
          "T036496",
          "T036497"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-54551"
    },
    {
      "cve": "CVE-2024-54564",
      "product_status": {
        "known_affected": [
          "T036494",
          "T036495",
          "T036496",
          "T036497"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-54564"
    }
  ]
}

WID-SEC-W-2024-1725

Vulnerability from csaf_certbund - Published: 2024-07-29 22:00 - Updated: 2025-03-27 23:00

Summary

Apple macOS: Mehrere Schwachstellen

Severity

Hoch

Notes

Produktbeschreibung: Apple macOS ist ein Betriebssystem, das auf FreeBSD und Mach basiert.

Angriff: Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apple macOS ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code mit Administratorrechten auszuführen, einen Denial-of-Service-Zustand zu erzeugen, Daten zu modifizieren, den Benutzer zu täuschen, Sicherheitsmaßnahmen zu umgehen und vertrauliche Informationen offenzulegen.

Betroffene Betriebssysteme: - MacOS X - UNIX

CVE-2023-27952

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2023-38709

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2023-52356

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2023-6277

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-2004

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-23261

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-23296

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-2379

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-2398

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-2466

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-24795

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-27316

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-27826

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-27862

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-27863

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-27871

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-27872

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-27873

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-27877

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-27878

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-27881

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-27882

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-27883

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-40774

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-40775

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-40776

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-40777

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-40778

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-40779

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-40780

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-40781

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-40782

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-40783

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-40784

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-40785

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-40786

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-40787

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-40788

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-40789

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-40793

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-40794

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-40795

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-40796

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-40798

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-40799

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-40800

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-40802

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-40803

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-40804

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-40805

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-40806

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-40807

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-40809

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-40810

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-40811

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-40812

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-40814

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-40815

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-40816

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-40817

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-40818

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-40821

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-40822

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-40823

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-40824

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-40827

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-40828

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-40829

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-40832

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-40833

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-40834

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-40835

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-40836

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-44141

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-44185

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-44199

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-44205

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-44206

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-44305

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-44306

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-44307

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-4558

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-54551

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-54564

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

CVE-2024-6387

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Monterey <12.7.6 Apple / macOS		Monterey <12.7.6
Apple macOS Sonoma <14.6 Apple / macOS		Sonoma <14.6
Apple macOS Ventura <13.6.8 Apple / macOS		Ventura <13.6.8

References

5 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://support.apple.com/en-us/HT214118	external
https://support.apple.com/en-us/HT214119	external
https://support.apple.com/en-eg/HT214120	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Apple macOS ist ein Betriebssystem, das auf FreeBSD und Mach basiert.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apple macOS ausnutzen, um seine Privilegien zu erh\u00f6hen, beliebigen Code mit Administratorrechten auszuf\u00fchren, einen Denial-of-Service-Zustand zu erzeugen, Daten zu modifizieren, den Benutzer zu t\u00e4uschen, Sicherheitsma\u00dfnahmen zu umgehen und vertrauliche Informationen offenzulegen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- MacOS X\n- UNIX",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2024-1725 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1725.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2024-1725 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1725"
      },
      {
        "category": "external",
        "summary": "Apple security Update vom 2024-07-29",
        "url": "https://support.apple.com/en-us/HT214118"
      },
      {
        "category": "external",
        "summary": "Apple security Update vom 2024-07-29",
        "url": "https://support.apple.com/en-us/HT214119"
      },
      {
        "category": "external",
        "summary": "Apple security Update vom 2024-07-29",
        "url": "https://support.apple.com/en-eg/HT214120"
      }
    ],
    "source_lang": "en-US",
    "title": "Apple macOS: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2025-03-27T23:00:00.000+00:00",
      "generator": {
        "date": "2025-03-28T09:20:40.897+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.12"
        }
      },
      "id": "WID-SEC-W-2024-1725",
      "initial_release_date": "2024-07-29T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2024-07-29T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2024-10-15T22:00:00.000+00:00",
          "number": "2",
          "summary": "CVE\u0027s erg\u00e4nzt"
        },
        {
          "date": "2024-11-20T23:00:00.000+00:00",
          "number": "3",
          "summary": "CVE aufgenommen"
        },
        {
          "date": "2025-03-23T23:00:00.000+00:00",
          "number": "4",
          "summary": "CVE erg\u00e4nzt"
        },
        {
          "date": "2025-03-24T23:00:00.000+00:00",
          "number": "5",
          "summary": "CVE-2024-54551, CVE-2024-54564 erg\u00e4nzt"
        },
        {
          "date": "2025-03-27T23:00:00.000+00:00",
          "number": "6",
          "summary": "CVE-2024-40810, CVE-2024-44305 erg\u00e4nzt"
        }
      ],
      "status": "final",
      "version": "6"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "Monterey \u003c12.7.6",
                "product": {
                  "name": "Apple macOS Monterey \u003c12.7.6",
                  "product_id": "T036491"
                }
              },
              {
                "category": "product_version",
                "name": "Monterey 12.7.6",
                "product": {
                  "name": "Apple macOS Monterey 12.7.6",
                  "product_id": "T036491-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:apple:mac_os:monterey__12.7.6"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Sonoma \u003c14.6",
                "product": {
                  "name": "Apple macOS Sonoma \u003c14.6",
                  "product_id": "T036492"
                }
              },
              {
                "category": "product_version",
                "name": "Sonoma 14.6",
                "product": {
                  "name": "Apple macOS Sonoma 14.6",
                  "product_id": "T036492-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:apple:mac_os:sonoma__14.6"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Ventura \u003c13.6.8",
                "product": {
                  "name": "Apple macOS Ventura \u003c13.6.8",
                  "product_id": "T036493"
                }
              },
              {
                "category": "product_version",
                "name": "Ventura 13.6.8",
                "product": {
                  "name": "Apple macOS Ventura 13.6.8",
                  "product_id": "T036493-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:apple:mac_os:ventura__13.6.8"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "macOS"
          }
        ],
        "category": "vendor",
        "name": "Apple"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-27952",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2023-27952"
    },
    {
      "cve": "CVE-2023-38709",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2023-38709"
    },
    {
      "cve": "CVE-2023-52356",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2023-52356"
    },
    {
      "cve": "CVE-2023-6277",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2023-6277"
    },
    {
      "cve": "CVE-2024-2004",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-2004"
    },
    {
      "cve": "CVE-2024-23261",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-23261"
    },
    {
      "cve": "CVE-2024-23296",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-23296"
    },
    {
      "cve": "CVE-2024-2379",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-2379"
    },
    {
      "cve": "CVE-2024-2398",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-2398"
    },
    {
      "cve": "CVE-2024-2466",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-2466"
    },
    {
      "cve": "CVE-2024-24795",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-24795"
    },
    {
      "cve": "CVE-2024-27316",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-27316"
    },
    {
      "cve": "CVE-2024-27826",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-27826"
    },
    {
      "cve": "CVE-2024-27862",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-27862"
    },
    {
      "cve": "CVE-2024-27863",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-27863"
    },
    {
      "cve": "CVE-2024-27871",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-27871"
    },
    {
      "cve": "CVE-2024-27872",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-27872"
    },
    {
      "cve": "CVE-2024-27873",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-27873"
    },
    {
      "cve": "CVE-2024-27877",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-27877"
    },
    {
      "cve": "CVE-2024-27878",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-27878"
    },
    {
      "cve": "CVE-2024-27881",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-27881"
    },
    {
      "cve": "CVE-2024-27882",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-27882"
    },
    {
      "cve": "CVE-2024-27883",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-27883"
    },
    {
      "cve": "CVE-2024-40774",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40774"
    },
    {
      "cve": "CVE-2024-40775",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40775"
    },
    {
      "cve": "CVE-2024-40776",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40776"
    },
    {
      "cve": "CVE-2024-40777",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40777"
    },
    {
      "cve": "CVE-2024-40778",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40778"
    },
    {
      "cve": "CVE-2024-40779",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40779"
    },
    {
      "cve": "CVE-2024-40780",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40780"
    },
    {
      "cve": "CVE-2024-40781",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40781"
    },
    {
      "cve": "CVE-2024-40782",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40782"
    },
    {
      "cve": "CVE-2024-40783",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40783"
    },
    {
      "cve": "CVE-2024-40784",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40784"
    },
    {
      "cve": "CVE-2024-40785",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40785"
    },
    {
      "cve": "CVE-2024-40786",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40786"
    },
    {
      "cve": "CVE-2024-40787",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40787"
    },
    {
      "cve": "CVE-2024-40788",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40788"
    },
    {
      "cve": "CVE-2024-40789",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40789"
    },
    {
      "cve": "CVE-2024-40793",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40793"
    },
    {
      "cve": "CVE-2024-40794",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40794"
    },
    {
      "cve": "CVE-2024-40795",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40795"
    },
    {
      "cve": "CVE-2024-40796",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40796"
    },
    {
      "cve": "CVE-2024-40798",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40798"
    },
    {
      "cve": "CVE-2024-40799",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40799"
    },
    {
      "cve": "CVE-2024-40800",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40800"
    },
    {
      "cve": "CVE-2024-40802",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40802"
    },
    {
      "cve": "CVE-2024-40803",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40803"
    },
    {
      "cve": "CVE-2024-40804",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40804"
    },
    {
      "cve": "CVE-2024-40805",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40805"
    },
    {
      "cve": "CVE-2024-40806",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40806"
    },
    {
      "cve": "CVE-2024-40807",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40807"
    },
    {
      "cve": "CVE-2024-40809",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40809"
    },
    {
      "cve": "CVE-2024-40810",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40810"
    },
    {
      "cve": "CVE-2024-40811",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40811"
    },
    {
      "cve": "CVE-2024-40812",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40812"
    },
    {
      "cve": "CVE-2024-40814",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40814"
    },
    {
      "cve": "CVE-2024-40815",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40815"
    },
    {
      "cve": "CVE-2024-40816",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40816"
    },
    {
      "cve": "CVE-2024-40817",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40817"
    },
    {
      "cve": "CVE-2024-40818",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40818"
    },
    {
      "cve": "CVE-2024-40821",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40821"
    },
    {
      "cve": "CVE-2024-40822",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40822"
    },
    {
      "cve": "CVE-2024-40823",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40823"
    },
    {
      "cve": "CVE-2024-40824",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40824"
    },
    {
      "cve": "CVE-2024-40827",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40827"
    },
    {
      "cve": "CVE-2024-40828",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40828"
    },
    {
      "cve": "CVE-2024-40829",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40829"
    },
    {
      "cve": "CVE-2024-40832",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40832"
    },
    {
      "cve": "CVE-2024-40833",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40833"
    },
    {
      "cve": "CVE-2024-40834",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40834"
    },
    {
      "cve": "CVE-2024-40835",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40835"
    },
    {
      "cve": "CVE-2024-40836",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-40836"
    },
    {
      "cve": "CVE-2024-44141",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-44141"
    },
    {
      "cve": "CVE-2024-44185",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-44185"
    },
    {
      "cve": "CVE-2024-44199",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-44199"
    },
    {
      "cve": "CVE-2024-44205",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-44205"
    },
    {
      "cve": "CVE-2024-44206",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-44206"
    },
    {
      "cve": "CVE-2024-44305",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-44305"
    },
    {
      "cve": "CVE-2024-44306",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-44306"
    },
    {
      "cve": "CVE-2024-44307",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-44307"
    },
    {
      "cve": "CVE-2024-4558",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-4558"
    },
    {
      "cve": "CVE-2024-54551",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-54551"
    },
    {
      "cve": "CVE-2024-54564",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-54564"
    },
    {
      "cve": "CVE-2024-6387",
      "product_status": {
        "known_affected": [
          "T036491",
          "T036492",
          "T036493"
        ]
      },
      "release_date": "2024-07-29T22:00:00.000+00:00",
      "title": "CVE-2024-6387"
    }
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CVE-2024-40788 (GCVE-0-2024-40788)

Solutions

Solutions

Tags

Sightings

Nomenclature