Analysis Summary

CVE-2024-44216 CVSS:6.2

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. An app may be able to access user-sensitive data.

CVE-2024-44215 CVSS:5.5

This issue was addressed with improved checks. This issue is fixed in tvOS 18.1, iOS 18.1 and iPadOS 18.1, iOS 17.7.1 and iPadOS 17.7.1, macOS Ventura 13.7.1, macOS Sonoma 14.7.1, watchOS 11.1, visionOS 2.1. Processing an image may result in disclosure of process memory.

CVE-2024-44213 CVSS:7.5

An issue existed in the parsing of URLs. This issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. An attacker in a privileged network position may be able to leak sensitive user information.

CVE-2024-44208 CVSS:7.5

This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15. An app may be able to bypass certain Privacy preferences.

CVE-2024-44207 CVSS:4.3

This issue was addressed with improved checks. This issue is fixed in iOS 18.0.1 and iPadOS 18.0.1. Audio messages in Messages may be able to capture a few seconds of audio before the microphone indicator is activated.

CVE-2024-44206 CVSS:5.4

An issue in the handling of URL protocols was addressed with improved logic. This issue is fixed in tvOS 17.6, visionOS 1.3, Safari 17.6, watchOS 10.6, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6. A user may be able to bypass some web content restrictions.

Impact

• Security Bypass
• Information Disclosure
• Gain Access

Indicators of Compromise

CVE

• CVE-2024-44216
• CVE-2024-44215
• CVE-2024-44213
• CVE-2024-44208
• CVE-2024-44207
• CVE-2024-44206

Affected Vendors

Affected Products

• Apple macOS - unspecified
• Visionos Versions 2.1
• Macos Versions 13.7.1
• Macos Versions from 14.0 and 14.7.1
• Ipados Versions 17.7.1
• Ipados » Version: 18.0
• Iphone Os Versions 17.7.1
• Iphone Os » Version: 18.0
• Macos Versions 14.0 14.7.1
• Tvos Versions 18.1
• Watchos Versions 11.1
• Macos Versions 15.0
• Ipados Versions 18.0.1
• Iphone Os Versions 8.0.1
• Ipados Versions 17.6
• Iphone Os Versions 17.6
• Macos Versions 14.6
• Safari Versions 17.6
• Tvos Versions 17.6
• Visionos Versions 1.3

Remediation

Refer to Apple Security Document for patch, upgrade, or suggested workaround information.

CVE-2024-44216

CVE-2024-44215

CVE-2024-44213

CVE-2024-44208

CVE-2024-44207

CVE-2024-44206