Apple CVEs
4,637 CVEs and advisories name Apple as an affected vendor, 90 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-44306A buffer overflow issue was addressed with improved memory handling.
- CVE-2024-44233The issue was addressed with improved bounds checks.
- CVE-2024-44232The issue was addressed with improved bounds checks.
- CVE-2024-44234The issue was addressed with improved bounds checks.
- CVE-2024-44260This issue was addressed by removing the vulnerable code.
- CVE-2024-44237An out-of-bounds access issue was addressed with improved bounds checking.
- CVE-2024-44295This issue was addressed with additional entitlement checks.
- CVE-2024-44283An out-of-bounds read was addressed with improved bounds checking.
- CVE-2024-44145This issue was addressed through improved state management.
- CVE-2024-44240The issue was addressed with improved checks.
- CVE-2024-44217A permissions issue was addressed by removing vulnerable code and adding additional checks.
- CVE-2024-44256The issue was addressed with improved input sanitization.
- CVE-2024-44257This issue was addressed with improved redaction of sensitive information.
- CVE-2024-44216An access issue was addressed with additional sandbox restrictions.
- CVE-2024-40853This issue was addressed by restricting options offered on a locked device.
- CVE-2024-44144A buffer overflow was addressed with improved size validation.
- CVE-2024-44282An out-of-bounds read was addressed with improved input validation.
- CVE-2024-44294A path deletion vulnerability was addressed by preventing vulnerable code from running with privileges.
- CVE-2024-44236An out-of-bounds access issue was addressed with improved bounds checking.
- CVE-2024-44261This issue was addressed by restricting options offered on a locked device.
- CVE-2024-44277The issue was addressed with improved memory handling.
- CVE-2024-40792A permissions issue was addressed with additional restrictions.
- CVE-2024-44155A custom URL scheme handling issue was addressed with improved input validation.
- CVE-2024-44285A use-after-free issue was addressed with improved memory management.
- CVE-2024-44196A permissions issue was addressed with additional restrictions.
- CVE-2024-44159A path deletion vulnerability was addressed by preventing vulnerable code from running with privileges.
- CVE-2024-44270A logic issue was addressed with improved validation.
- CVE-2024-44289A privacy issue was addressed with improved private data redaction for log entries.
- CVE-2024-44122A logic issue was addressed with improved checks.
- CVE-2024-44175This issue was addressed with improved validation of symlinks.