Latest CVE Feed
-
5.5
MEDIUMCVE-2024-44269
A logic issue was addressed with improved checks. This issue is fixed in iOS 18.1 and iPadOS 18.1, iOS 17.7.1 and iPadOS 17.7.1, macOS Ventura 13.7.1, macOS Sonoma 14.7.1, watchOS 11.1, visionOS 2.1. A malicious app may use shortcuts to access restricted ... Read more
- Published: Oct. 28, 2024
- Modified: Dec. 09, 2024
-
5.5
MEDIUMCVE-2024-44253
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. An app may be able to modify protected parts of the file system.... Read more
Affected Products : macos- Published: Oct. 28, 2024
- Modified: Oct. 30, 2024
-
5.5
MEDIUMCVE-2024-44247
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. A malicious application may be able to modify protected parts of the file system.... Read more
Affected Products : macos- Published: Oct. 28, 2024
- Modified: Oct. 30, 2024
-
5.5
MEDIUMCVE-2024-44194
This issue was addressed with improved redaction of sensitive information. This issue is fixed in watchOS 11.1, visionOS 2.1, iOS 18.1 and iPadOS 18.1. An app may be able to access sensitive user data.... Read more
- Published: Oct. 28, 2024
- Modified: Dec. 06, 2024
-
5.5
MEDIUMCVE-2024-44170
A privacy issue was addressed by moving sensitive data to a more secure location. This issue is fixed in iOS 18 and iPadOS 18, watchOS 11, macOS Sequoia 15. An app may be able to access user-sensitive data.... Read more
- Published: Sep. 17, 2024
- Modified: Mar. 25, 2025
-
5.5
MEDIUMCVE-2024-44163
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. A malicious application may be able to access private information.... Read more
Affected Products : macos- Published: Sep. 17, 2024
- Modified: Mar. 18, 2025
-
5.5
MEDIUMCVE-2024-44157
A stack buffer overflow was addressed through improved input validation. This issue is fixed in Apple TV 1.5.0.152 for Windows, iTunes 12.13.3 for Windows. Parsing a maliciously crafted video file may lead to unexpected system termination.... Read more
- Published: Oct. 11, 2024
- Modified: Dec. 12, 2024
-
5.5
MEDIUMCVE-2024-44128
This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. An Automator Quick Action workflow may be able to bypass Gatekeeper.... Read more
Affected Products : macos- Published: Sep. 17, 2024
- Modified: Mar. 18, 2025
-
5.5
MEDIUMCVE-2024-44125
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.7, macOS Sequoia 15. A malicious application may be able to leak sensitive user information.... Read more
Affected Products : macos- Published: Sep. 17, 2024
- Modified: Mar. 25, 2025
-
5.5
MEDIUMCVE-2024-42066
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix potential integer overflow in page size calculation Explicitly cast tbo->page_alignment to u64 before bit-shifting to prevent overflow when assigning to min_page_size.... Read more
Affected Products : linux_kernel- Published: Jul. 29, 2024
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2024-41836
InDesign Desktop versions ID18.5.2, ID19.3 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-service (DoS) condition. An attacker could exploit this vulnerability to crash the application, res... Read more
- Published: Jul. 23, 2024
- Modified: Dec. 12, 2024
-
5.5
MEDIUMCVE-2024-4141
Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by an invalid character code in a Type 1 font. The root problem was a bounds check that was being optimized away by modern compilers. ... Read more
Affected Products : xpdf- Published: Apr. 24, 2024
- Modified: Jan. 29, 2025
-
5.5
MEDIUMCVE-2024-40850
A file access issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13.7, iOS 17.7 and iPadOS 17.7, visionOS 2, watchOS 11, macOS Sequoia 15, iOS 18 and iPadOS 18, macOS Sonoma 14.7, tvOS 18. An app may be able to access... Read more
- Published: Sep. 17, 2024
- Modified: Mar. 22, 2025
-
5.5
MEDIUMCVE-2024-40847
The issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. An app may be able to access sensitive user data.... Read more
Affected Products : macos- Published: Sep. 17, 2024
- Modified: Mar. 25, 2025
-
5.5
MEDIUMCVE-2024-40845
The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.7, macOS Sequoia 15. Processing a maliciously crafted video file may lead to unexpected app termination.... Read more
Affected Products : macos- Published: Sep. 17, 2024
- Modified: Mar. 14, 2025
-
5.5
MEDIUMCVE-2024-40835
A logic issue was addressed with improved checks. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, macOS Ventura 13.6.8, macOS Monterey 12.7.6, iOS 17.6 and iPadOS 17.6, watchOS 10.6, macOS Sonoma 14.6. A shortcut may be able to use sensitive data wit... Read more
- Published: Jul. 29, 2024
- Modified: Mar. 18, 2025
-
5.5
MEDIUMCVE-2024-40823
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.6, macOS Monterey 12.7.6, macOS Ventura 13.6.8. An app may be able to access user-sensitive data.... Read more
Affected Products : macos- Published: Jul. 29, 2024
- Modified: Mar. 24, 2025
-
5.5
MEDIUMCVE-2024-38122
Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability... Read more
Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_21h2 +10 more products- Published: Aug. 13, 2024
- Modified: Aug. 16, 2024
-
5.5
MEDIUMCVE-2024-38041
Windows Kernel Information Disclosure Vulnerability... Read more
Affected Products : windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_21h2 windows_11_22h2 windows +3 more products- Published: Jul. 09, 2024
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2024-34140
Bridge versions 14.0.4, 13.0.7, 14.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this ... Read more
Affected Products : bridge- Published: Jul. 09, 2024
- Modified: Nov. 21, 2024