Vulnerability-Lookup

CVE-2024-44169 (GCVE-0-2024-44169)

Vulnerability from cvelistv5 – Published: 2024-09-16 23:23 – Updated: 2026-04-02 18:25

Summary

The issue was addressed with improved memory handling. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7, tvOS 18, visionOS 2, watchOS 11. An app may be able to cause unexpected system termination.

Severity

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-09-17 13:30 UTC

CWE

An app may be able to cause unexpected system termination
CWE-400 - Uncontrolled Resource Consumption

Assigner

apple mitre root

References

13 references

URL	Tags
https://support.apple.com/en-us/121234
https://support.apple.com/en-us/121238
https://support.apple.com/en-us/121240
https://support.apple.com/en-us/121246
https://support.apple.com/en-us/121247
https://support.apple.com/en-us/121248
https://support.apple.com/en-us/121249
https://support.apple.com/en-us/121250
http://seclists.org/fulldisclosure/2024/Sep/40
http://seclists.org/fulldisclosure/2024/Sep/36
http://seclists.org/fulldisclosure/2024/Sep/33
http://seclists.org/fulldisclosure/2024/Sep/41
http://seclists.org/fulldisclosure/2024/Sep/32

Impacted products

10 products

Vendor	Product	Version	CPE status
Apple	iOS and iPadOS	Affected: 0 , < 17.7 (custom) Affected: 0 , < 18 (custom)	guessed
Apple	macOS	Affected: 0 , < 13.7 (custom) Affected: 0 , < 14.7 (custom) Affected: 0 , < 15 (custom)	guessed
Apple	tvOS	Affected: 0 , < 18 (custom)	guessed
Apple	visionOS	Affected: 0 , < 2 (custom)	guessed
Apple	watchOS	Affected: 0 , < 11 (custom)	guessed
apple	macos	Affected: 0 , < 13.7 (custom) Affected: 0 , < 14.7 (custom) Affected: 0 , < 15 (custom) cpe:2.3:o:apple:macos::::::::
apple	ios_and_ipados	Affected: 0 , < 17.7 (custom) Affected: 0 , < 18 (custom) cpe:2.3:o:apple:ios_and_ipados::::::::
apple	tvos	Affected: 0 , < 18 (custom) cpe:2.3:o:apple:tvos:-:::::::*
apple	visionos	Affected: 0 , < 2 (custom) cpe:2.3:o:apple:visionos:-:::::::*
apple	watch_os	Affected: 0 , < 11 (custom) cpe:2.3:o:apple:watch_os::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "macos",
            "vendor": "apple",
            "versions": [
              {
                "lessThan": "13.7",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "14.7",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "15",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:apple:ios_and_ipados:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ios_and_ipados",
            "vendor": "apple",
            "versions": [
              {
                "lessThan": "17.7",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "18",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:apple:tvos:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "tvos",
            "vendor": "apple",
            "versions": [
              {
                "lessThan": "18",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:apple:visionos:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "visionos",
            "vendor": "apple",
            "versions": [
              {
                "lessThan": "2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:apple:watch_os:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "watch_os",
            "vendor": "apple",
            "versions": [
              {
                "lessThan": "11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 8.1,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-44169",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-17T13:30:00.573003Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-400",
                "description": "CWE-400 Uncontrolled Resource Consumption",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-17T13:37:50.374Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-04T16:14:55.108Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2024/Sep/40"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2024/Sep/36"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2024/Sep/33"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2024/Sep/41"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2024/Sep/32"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "18",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "15",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "11",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved memory handling. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7, tvOS 18, visionOS 2, watchOS 11. An app may be able to cause unexpected system termination."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to cause unexpected system termination",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-02T18:25:33.133Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/121234"
        },
        {
          "url": "https://support.apple.com/en-us/121238"
        },
        {
          "url": "https://support.apple.com/en-us/121240"
        },
        {
          "url": "https://support.apple.com/en-us/121246"
        },
        {
          "url": "https://support.apple.com/en-us/121247"
        },
        {
          "url": "https://support.apple.com/en-us/121248"
        },
        {
          "url": "https://support.apple.com/en-us/121249"
        },
        {
          "url": "https://support.apple.com/en-us/121250"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2024-44169",
    "datePublished": "2024-09-16T23:23:20.604Z",
    "dateReserved": "2024-08-20T21:42:05.926Z",
    "dateUpdated": "2026-04-02T18:25:33.133Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2024-44169",
      "date": "2026-09-20",
      "epss": "0.00556",
      "percentile": "0.45171"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "product": "iOS and iPadOS",
                "vendor": "Apple",
                "versions": [
                  {
                    "lessThan": "17.7",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  },
                  {
                    "lessThan": "18",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "product": "macOS",
                "vendor": "Apple",
                "versions": [
                  {
                    "lessThan": "13.7",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  },
                  {
                    "lessThan": "14.7",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  },
                  {
                    "lessThan": "15",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "product": "tvOS",
                "vendor": "Apple",
                "versions": [
                  {
                    "lessThan": "18",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "product": "visionOS",
                "vendor": "Apple",
                "versions": [
                  {
                    "lessThan": "2",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "product": "watchOS",
                "vendor": "Apple",
                "versions": [
                  {
                    "lessThan": "11",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              }
            ],
            "source": "product-security@apple.com"
          },
          {
            "affectedData": [
              {
                "cpes": [
                  "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "macos",
                "vendor": "apple",
                "versions": [
                  {
                    "lessThan": "13.7",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  },
                  {
                    "lessThan": "14.7",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  },
                  {
                    "lessThan": "15",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:apple:ios_and_ipados:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "ios_and_ipados",
                "vendor": "apple",
                "versions": [
                  {
                    "lessThan": "17.7",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  },
                  {
                    "lessThan": "18",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:apple:tvos:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "tvos",
                "vendor": "apple",
                "versions": [
                  {
                    "lessThan": "18",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:apple:visionos:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "visionos",
                "vendor": "apple",
                "versions": [
                  {
                    "lessThan": "2",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:apple:watch_os:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "watch_os",
                "vendor": "apple",
                "versions": [
                  {
                    "lessThan": "11",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              }
            ],
            "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "064488F4-456F-4C5D-B325-4F1FCDF2D432",
                    "versionEndExcluding": "17.7",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "B8542FD9-368A-4A38-965E-47AE279208F1",
                    "versionEndExcluding": "17.7",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "74C58F2C-DE4F-45E9-A5C0-CDF8B666EB4E",
                    "versionEndExcluding": "13.7",
                    "versionStartIncluding": "13.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "06F1EED8-2BB5-4768-908B-83AF76DE7B5F",
                    "versionEndExcluding": "14.7",
                    "versionStartIncluding": "14.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "F34BD4C1-5C6A-4C6D-BD96-8CC3F3CBFF74",
                    "versionEndExcluding": "18.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A6AE7B0F-C356-4601-9636-617CDD09F009",
                    "versionEndExcluding": "2.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "05C212C2-3E65-47DB-A0AE-417A8178ADC6",
                    "versionEndExcluding": "11.0",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "The issue was addressed with improved memory handling. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7, tvOS 18, visionOS 2, watchOS 11. An app may be able to cause unexpected system termination."
          },
          {
            "lang": "es",
            "value": "El problema se solucion\u00f3 con una gesti\u00f3n mejorada de la memoria. Este problema se solucion\u00f3 en macOS Ventura 13.7, iOS 17.7 y iPadOS 17.7, visionOS 2, watchOS 11, macOS Sequoia 15, iOS 18 y iPadOS 18, macOS Sonoma 14.7 y tvOS 18. Es posible que una aplicaci\u00f3n pueda provocar la finalizaci\u00f3n inesperada del sistema."
          }
        ],
        "id": "CVE-2024-44169",
        "lastModified": "2026-06-17T07:52:27.110",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 5.5,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "REQUIRED",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 1.8,
              "impactScore": 3.6,
              "source": "nvd@nist.gov",
              "type": "Primary"
            },
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 8.1,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "REQUIRED",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
                "version": "3.1"
              },
              "exploitabilityScore": 2.8,
              "impactScore": 5.2,
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "type": "Secondary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2024-44169",
                "options": [
                  {
                    "exploitation": "none"
                  },
                  {
                    "automatable": "no"
                  },
                  {
                    "technicalImpact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-17T13:30:00.573003Z",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2024-09-17T00:15:51.410",
        "references": [
          {
            "source": "product-security@apple.com",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://support.apple.com/en-us/121234"
          },
          {
            "source": "product-security@apple.com",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://support.apple.com/en-us/121238"
          },
          {
            "source": "product-security@apple.com",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://support.apple.com/en-us/121240"
          },
          {
            "source": "product-security@apple.com",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://support.apple.com/en-us/121246"
          },
          {
            "source": "product-security@apple.com",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://support.apple.com/en-us/121247"
          },
          {
            "source": "product-security@apple.com",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://support.apple.com/en-us/121248"
          },
          {
            "source": "product-security@apple.com",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://support.apple.com/en-us/121249"
          },
          {
            "source": "product-security@apple.com",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://support.apple.com/en-us/121250"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://seclists.org/fulldisclosure/2024/Sep/32"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://seclists.org/fulldisclosure/2024/Sep/33"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://seclists.org/fulldisclosure/2024/Sep/36"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://seclists.org/fulldisclosure/2024/Sep/40"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://seclists.org/fulldisclosure/2024/Sep/41"
          }
        ],
        "sourceIdentifier": "product-security@apple.com",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "NVD-CWE-noinfo"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          },
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-400"
              }
            ],
            "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
            "type": "Secondary"
          }
        ]
      }
    },
    "redhat_vex": {
      "current_release_date": "2026-04-02T22:54:51+00:00",
      "cve": "CVE-2024-44169",
      "id": "CVE-2024-44169",
      "initial_release_date": "2024-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "CVE-2024-44169",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-44169.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2025-11-04T16:14:55.108Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "url": "http://seclists.org/fulldisclosure/2024/Sep/40"
              },
              {
                "url": "http://seclists.org/fulldisclosure/2024/Sep/36"
              },
              {
                "url": "http://seclists.org/fulldisclosure/2024/Sep/33"
              },
              {
                "url": "http://seclists.org/fulldisclosure/2024/Sep/41"
              },
              {
                "url": "http://seclists.org/fulldisclosure/2024/Sep/32"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "affected": [
              {
                "cpes": [
                  "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "macos",
                "vendor": "apple",
                "versions": [
                  {
                    "lessThan": "13.7",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  },
                  {
                    "lessThan": "14.7",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  },
                  {
                    "lessThan": "15",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:apple:ios_and_ipados:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "ios_and_ipados",
                "vendor": "apple",
                "versions": [
                  {
                    "lessThan": "17.7",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  },
                  {
                    "lessThan": "18",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:apple:tvos:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "tvos",
                "vendor": "apple",
                "versions": [
                  {
                    "lessThan": "18",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:apple:visionos:-:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "visionos",
                "vendor": "apple",
                "versions": [
                  {
                    "lessThan": "2",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:apple:watch_os:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "watch_os",
                "vendor": "apple",
                "versions": [
                  {
                    "lessThan": "11",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              }
            ],
            "metrics": [
              {
                "cvssV3_1": {
                  "attackComplexity": "LOW",
                  "attackVector": "NETWORK",
                  "availabilityImpact": "NONE",
                  "baseScore": 8.1,
                  "baseSeverity": "HIGH",
                  "confidentialityImpact": "HIGH",
                  "integrityImpact": "HIGH",
                  "privilegesRequired": "NONE",
                  "scope": "UNCHANGED",
                  "userInteraction": "REQUIRED",
                  "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
                  "version": "3.1"
                }
              },
              {
                "other": {
                  "content": {
                    "id": "CVE-2024-44169",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2024-09-17T13:30:00.573003Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-400",
                    "description": "CWE-400 Uncontrolled Resource Consumption",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2024-09-17T13:33:25.295Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "iOS and iPadOS",
              "vendor": "Apple",
              "versions": [
                {
                  "lessThan": "17.7",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                },
                {
                  "lessThan": "18",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "product": "macOS",
              "vendor": "Apple",
              "versions": [
                {
                  "lessThan": "13.7",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                },
                {
                  "lessThan": "14.7",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                },
                {
                  "lessThan": "15",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "product": "tvOS",
              "vendor": "Apple",
              "versions": [
                {
                  "lessThan": "18",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "product": "visionOS",
              "vendor": "Apple",
              "versions": [
                {
                  "lessThan": "2",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "product": "watchOS",
              "vendor": "Apple",
              "versions": [
                {
                  "lessThan": "11",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "The issue was addressed with improved memory handling. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7, tvOS 18, visionOS 2, watchOS 11. An app may be able to cause unexpected system termination."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "An app may be able to cause unexpected system termination",
                  "lang": "en"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-04-02T18:25:33.133Z",
            "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
            "shortName": "apple"
          },
          "references": [
            {
              "url": "https://support.apple.com/en-us/121234"
            },
            {
              "url": "https://support.apple.com/en-us/121238"
            },
            {
              "url": "https://support.apple.com/en-us/121240"
            },
            {
              "url": "https://support.apple.com/en-us/121246"
            },
            {
              "url": "https://support.apple.com/en-us/121247"
            },
            {
              "url": "https://support.apple.com/en-us/121248"
            },
            {
              "url": "https://support.apple.com/en-us/121249"
            },
            {
              "url": "https://support.apple.com/en-us/121250"
            }
          ]
        }
      },
      "cveMetadata": {
        "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "assignerShortName": "apple",
        "cveId": "CVE-2024-44169",
        "datePublished": "2024-09-16T23:23:20.604Z",
        "dateReserved": "2024-08-20T21:42:05.926Z",
        "dateUpdated": "2026-04-02T18:25:33.133Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

CERTFR-2024-AVI-0785

Vulnerability from certfr_avis - Published: 2024-09-17 - Updated: 2024-09-17

De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaquant de provoquer une élévation de privilèges, une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
Apple	N/A	tvOS versions antérieures à 18
Apple	N/A	visionOS versions antérieures à 2
Apple	iOS	iOS et iPadOS versions antérieures à 18
Apple	iOS	iOS et iPadOS versions antérieures à 17.7
Apple	N/A	Xcode versions antérieures à 16
Apple	macOS	macOS Sonoma versions antérieures à 14.7
Apple	macOS	macOS Sequoia versions antérieures à 15
Apple	macOS	macOS Ventura versions antérieures à 13.7
Apple	Safari	Safari versions antérieures à 18
Apple	N/A	watchOS 11 versions antérieures à 11

References

Title

Publication Time

Tags

Bulletin de sécurité Apple 121238	2024-09-16	vendor-advisory
Bulletin de sécurité Apple 121240	2024-09-16	vendor-advisory
Bulletin de sécurité Apple 121239	2024-09-16	vendor-advisory
Bulletin de sécurité Apple 121246	2024-09-16	vendor-advisory
Bulletin de sécurité Apple 121241	2024-09-16	vendor-advisory
Bulletin de sécurité Apple 121250	2024-09-16	vendor-advisory
Bulletin de sécurité Apple 121234	2024-09-16	vendor-advisory
Bulletin de sécurité Apple 121247	2024-09-16	vendor-advisory
Bulletin de sécurité Apple 121249	2024-09-16	vendor-advisory
Bulletin de sécurité Apple 121248	2024-09-16	vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "tvOS versions ant\u00e9rieures \u00e0 18",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "visionOS\u00a0versions ant\u00e9rieures \u00e0 2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "iOS et iPadOS versions ant\u00e9rieures \u00e0 18",
      "product": {
        "name": "iOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "iOS et iPadOS versions ant\u00e9rieures \u00e0 17.7",
      "product": {
        "name": "iOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "Xcode versions ant\u00e9rieures \u00e0 16",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "macOS Sonoma versions ant\u00e9rieures \u00e0 14.7",
      "product": {
        "name": "macOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "macOS Sequoia versions ant\u00e9rieures \u00e0 15",
      "product": {
        "name": "macOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "macOS Ventura versions ant\u00e9rieures \u00e0 13.7",
      "product": {
        "name": "macOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "Safari versions ant\u00e9rieures \u00e0 18",
      "product": {
        "name": "Safari",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "watchOS\u00a011 versions ant\u00e9rieures \u00e0 11",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2024-44124",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44124"
    },
    {
      "name": "CVE-2024-44135",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44135"
    },
    {
      "name": "CVE-2024-40837",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40837"
    },
    {
      "name": "CVE-2023-5841",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-5841"
    },
    {
      "name": "CVE-2023-4504",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-4504"
    },
    {
      "name": "CVE-2024-44191",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44191"
    },
    {
      "name": "CVE-2024-40856",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40856"
    },
    {
      "name": "CVE-2024-44146",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44146"
    },
    {
      "name": "CVE-2024-44181",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44181"
    },
    {
      "name": "CVE-2024-40863",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40863"
    },
    {
      "name": "CVE-2024-23237",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-23237"
    },
    {
      "name": "CVE-2024-27879",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-27879"
    },
    {
      "name": "CVE-2024-44183",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44183"
    },
    {
      "name": "CVE-2024-40866",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40866"
    },
    {
      "name": "CVE-2024-44184",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44184"
    },
    {
      "name": "CVE-2024-40857",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40857"
    },
    {
      "name": "CVE-2024-40842",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40842"
    },
    {
      "name": "CVE-2024-44131",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44131"
    },
    {
      "name": "CVE-2024-44178",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44178"
    },
    {
      "name": "CVE-2024-44169",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44169"
    },
    {
      "name": "CVE-2024-44202",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44202"
    },
    {
      "name": "CVE-2024-41957",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-41957"
    },
    {
      "name": "CVE-2024-44167",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44167"
    },
    {
      "name": "CVE-2024-40844",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40844"
    },
    {
      "name": "CVE-2024-27869",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-27869"
    },
    {
      "name": "CVE-2024-40791",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40791"
    },
    {
      "name": "CVE-2024-44189",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44189"
    },
    {
      "name": "CVE-2024-44187",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44187"
    },
    {
      "name": "CVE-2024-44158",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44158"
    },
    {
      "name": "CVE-2024-44171",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44171"
    },
    {
      "name": "CVE-2024-44177",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44177"
    },
    {
      "name": "CVE-2024-44170",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44170"
    },
    {
      "name": "CVE-2024-40825",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40825"
    },
    {
      "name": "CVE-2024-40826",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40826"
    },
    {
      "name": "CVE-2024-27880",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-27880"
    },
    {
      "name": "CVE-2024-44188",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44188"
    },
    {
      "name": "CVE-2024-40797",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40797"
    },
    {
      "name": "CVE-2024-44130",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44130"
    },
    {
      "name": "CVE-2024-44132",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44132"
    },
    {
      "name": "CVE-2024-39894",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-39894"
    },
    {
      "name": "CVE-2024-44161",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44161"
    },
    {
      "name": "CVE-2024-40847",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40847"
    },
    {
      "name": "CVE-2024-40838",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40838"
    },
    {
      "name": "CVE-2024-44164",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44164"
    },
    {
      "name": "CVE-2024-44186",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44186"
    },
    {
      "name": "CVE-2024-44148",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44148"
    },
    {
      "name": "CVE-2024-44190",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44190"
    },
    {
      "name": "CVE-2024-44133",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44133"
    },
    {
      "name": "CVE-2024-27886",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-27886"
    },
    {
      "name": "CVE-2024-40831",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40831"
    },
    {
      "name": "CVE-2024-40845",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40845"
    },
    {
      "name": "CVE-2024-40860",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40860"
    },
    {
      "name": "CVE-2024-44180",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44180"
    },
    {
      "name": "CVE-2024-40848",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40848"
    },
    {
      "name": "CVE-2024-44147",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44147"
    },
    {
      "name": "CVE-2024-44152",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44152"
    },
    {
      "name": "CVE-2024-40843",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40843"
    },
    {
      "name": "CVE-2024-44198",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44198"
    },
    {
      "name": "CVE-2024-40770",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40770"
    },
    {
      "name": "CVE-2024-44139",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44139"
    },
    {
      "name": "CVE-2024-44151",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44151"
    },
    {
      "name": "CVE-2024-44165",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44165"
    },
    {
      "name": "CVE-2024-40850",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40850"
    },
    {
      "name": "CVE-2024-44182",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44182"
    },
    {
      "name": "CVE-2024-27875",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-27875"
    },
    {
      "name": "CVE-2024-44149",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44149"
    },
    {
      "name": "CVE-2024-27858",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-27858"
    },
    {
      "name": "CVE-2024-44154",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44154"
    },
    {
      "name": "CVE-2024-40840",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40840"
    },
    {
      "name": "CVE-2024-27874",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-27874"
    },
    {
      "name": "CVE-2024-40841",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40841"
    },
    {
      "name": "CVE-2024-27876",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-27876"
    },
    {
      "name": "CVE-2024-40859",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40859"
    },
    {
      "name": "CVE-2024-44153",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44153"
    },
    {
      "name": "CVE-2024-40846",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40846"
    },
    {
      "name": "CVE-2024-40814",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40814"
    },
    {
      "name": "CVE-2024-40852",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40852"
    },
    {
      "name": "CVE-2024-27795",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-27795"
    },
    {
      "name": "CVE-2024-40861",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40861"
    },
    {
      "name": "CVE-2024-40862",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40862"
    },
    {
      "name": "CVE-2024-44128",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44128"
    },
    {
      "name": "CVE-2024-44176",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44176"
    },
    {
      "name": "CVE-2024-44162",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44162"
    },
    {
      "name": "CVE-2024-40830",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40830"
    },
    {
      "name": "CVE-2024-40801",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40801"
    },
    {
      "name": "CVE-2024-44163",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44163"
    },
    {
      "name": "CVE-2024-44129",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44129"
    },
    {
      "name": "CVE-2024-27860",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-27860"
    },
    {
      "name": "CVE-2024-44166",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44166"
    },
    {
      "name": "CVE-2024-44168",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44168"
    },
    {
      "name": "CVE-2024-44134",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44134"
    },
    {
      "name": "CVE-2024-44125",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44125"
    },
    {
      "name": "CVE-2024-27861",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-27861"
    },
    {
      "name": "CVE-2024-44127",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44127"
    },
    {
      "name": "CVE-2024-40790",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-40790"
    },
    {
      "name": "CVE-2024-44160",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-44160"
    }
  ],
  "initial_release_date": "2024-09-17T00:00:00",
  "last_revision_date": "2024-09-17T00:00:00",
  "links": [],
  "reference": "CERTFR-2024-AVI-0785",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2024-09-17T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Injection de code indirecte \u00e0 distance (XSS)"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Apple. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une \u00e9l\u00e9vation de privil\u00e8ges, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Apple",
  "vendor_advisories": [
    {
      "published_at": "2024-09-16",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 121238",
      "url": "https://support.apple.com/en-us/121238"
    },
    {
      "published_at": "2024-09-16",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 121240",
      "url": "https://support.apple.com/en-us/121240"
    },
    {
      "published_at": "2024-09-16",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 121239",
      "url": "https://support.apple.com/en-us/121239"
    },
    {
      "published_at": "2024-09-16",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 121246",
      "url": "https://support.apple.com/en-us/121246"
    },
    {
      "published_at": "2024-09-16",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 121241",
      "url": "https://support.apple.com/en-us/121241"
    },
    {
      "published_at": "2024-09-16",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 121250",
      "url": "https://support.apple.com/en-us/121250"
    },
    {
      "published_at": "2024-09-16",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 121234",
      "url": "https://support.apple.com/en-us/121234"
    },
    {
      "published_at": "2024-09-16",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 121247",
      "url": "https://support.apple.com/en-us/121247"
    },
    {
      "published_at": "2024-09-16",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 121249",
      "url": "https://support.apple.com/en-us/121249"
    },
    {
      "published_at": "2024-09-16",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 121248",
      "url": "https://support.apple.com/en-us/121248"
    }
  ]
}

FKIE_CVE-2024-44169

Vulnerability from fkie_nvd - Published: 2024-09-17 00:15 - Updated: 2026-06-17 07:52

Severity

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
8.1 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Summary

References

URL	Tags
product-security@apple.com	https://support.apple.com/en-us/121234	Vendor Advisory
product-security@apple.com	https://support.apple.com/en-us/121238	Vendor Advisory
product-security@apple.com	https://support.apple.com/en-us/121240	Vendor Advisory
product-security@apple.com	https://support.apple.com/en-us/121246	Vendor Advisory
product-security@apple.com	https://support.apple.com/en-us/121247	Vendor Advisory
product-security@apple.com	https://support.apple.com/en-us/121248	Vendor Advisory
product-security@apple.com	https://support.apple.com/en-us/121249	Vendor Advisory
product-security@apple.com	https://support.apple.com/en-us/121250	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://seclists.org/fulldisclosure/2024/Sep/32
af854a3a-2127-422b-91ae-364da2661108	http://seclists.org/fulldisclosure/2024/Sep/33
af854a3a-2127-422b-91ae-364da2661108	http://seclists.org/fulldisclosure/2024/Sep/36
af854a3a-2127-422b-91ae-364da2661108	http://seclists.org/fulldisclosure/2024/Sep/40
af854a3a-2127-422b-91ae-364da2661108	http://seclists.org/fulldisclosure/2024/Sep/41

Impacted products

Vendor	Product	Version
apple	ipados	*
apple	iphone_os	*
apple	macos	*
apple	macos	*
apple	tvos	*
apple	visionos	*
apple	watchos	*

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "18",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "15",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "11",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "source": "product-security@apple.com"
    },
    {
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unknown",
          "product": "macos",
          "vendor": "apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "15",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:o:apple:ios_and_ipados:*:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unknown",
          "product": "ios_and_ipados",
          "vendor": "apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "18",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:o:apple:tvos:-:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unknown",
          "product": "tvos",
          "vendor": "apple",
          "versions": [
            {
              "lessThan": "18",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:o:apple:visionos:-:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unknown",
          "product": "visionos",
          "vendor": "apple",
          "versions": [
            {
              "lessThan": "2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:o:apple:watch_os:*:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unknown",
          "product": "watch_os",
          "vendor": "apple",
          "versions": [
            {
              "lessThan": "11",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "064488F4-456F-4C5D-B325-4F1FCDF2D432",
              "versionEndExcluding": "17.7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B8542FD9-368A-4A38-965E-47AE279208F1",
              "versionEndExcluding": "17.7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "74C58F2C-DE4F-45E9-A5C0-CDF8B666EB4E",
              "versionEndExcluding": "13.7",
              "versionStartIncluding": "13.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "06F1EED8-2BB5-4768-908B-83AF76DE7B5F",
              "versionEndExcluding": "14.7",
              "versionStartIncluding": "14.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F34BD4C1-5C6A-4C6D-BD96-8CC3F3CBFF74",
              "versionEndExcluding": "18.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "A6AE7B0F-C356-4601-9636-617CDD09F009",
              "versionEndExcluding": "2.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "05C212C2-3E65-47DB-A0AE-417A8178ADC6",
              "versionEndExcluding": "11.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The issue was addressed with improved memory handling. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7, tvOS 18, visionOS 2, watchOS 11. An app may be able to cause unexpected system termination."
    },
    {
      "lang": "es",
      "value": "El problema se solucion\u00f3 con una gesti\u00f3n mejorada de la memoria. Este problema se solucion\u00f3 en macOS Ventura 13.7, iOS 17.7 y iPadOS 17.7, visionOS 2, watchOS 11, macOS Sequoia 15, iOS 18 y iPadOS 18, macOS Sonoma 14.7 y tvOS 18. Es posible que una aplicaci\u00f3n pueda provocar la finalizaci\u00f3n inesperada del sistema."
    }
  ],
  "id": "CVE-2024-44169",
  "lastModified": "2026-06-17T07:52:27.110",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 5.5,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "REQUIRED",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 3.6,
        "source": "nvd@nist.gov",
        "type": "Primary"
      },
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 8.1,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "REQUIRED",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 5.2,
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-44169",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2024-09-17T13:30:00.573003Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2024-09-17T00:15:51.410",
  "references": [
    {
      "source": "product-security@apple.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/121234"
    },
    {
      "source": "product-security@apple.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/121238"
    },
    {
      "source": "product-security@apple.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/121240"
    },
    {
      "source": "product-security@apple.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/121246"
    },
    {
      "source": "product-security@apple.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/121247"
    },
    {
      "source": "product-security@apple.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/121248"
    },
    {
      "source": "product-security@apple.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/121249"
    },
    {
      "source": "product-security@apple.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/121250"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://seclists.org/fulldisclosure/2024/Sep/32"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://seclists.org/fulldisclosure/2024/Sep/33"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://seclists.org/fulldisclosure/2024/Sep/36"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://seclists.org/fulldisclosure/2024/Sep/40"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://seclists.org/fulldisclosure/2024/Sep/41"
    }
  ],
  "sourceIdentifier": "product-security@apple.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    },
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-400"
        }
      ],
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary"
    }
  ]
}

GHSA-6FH7-538C-G5QV

Vulnerability from github – Published: 2024-09-17 00:31 – Updated: 2025-11-04 18:31

Details

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.7, iOS 17.7 and iPadOS 17.7, visionOS 2, watchOS 11, macOS Sequoia 15, iOS 18 and iPadOS 18, macOS Sonoma 14.7, tvOS 18. An app may be able to cause unexpected system termination.

Severity

8.1 (High)


                  
                    CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2024-44169"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-400"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-09-17T00:15:51Z",
    "severity": "HIGH"
  },
  "details": "The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.7, iOS 17.7 and iPadOS 17.7, visionOS 2, watchOS 11, macOS Sequoia 15, iOS 18 and iPadOS 18, macOS Sonoma 14.7, tvOS 18. An app may be able to cause unexpected system termination.",
  "id": "GHSA-6fh7-538c-g5qv",
  "modified": "2025-11-04T18:31:24Z",
  "published": "2024-09-17T00:31:06Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-44169"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/121234"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/121238"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/121240"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/121246"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/121247"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/121248"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/121249"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/121250"
    },
    {
      "type": "WEB",
      "url": "http://seclists.org/fulldisclosure/2024/Sep/32"
    },
    {
      "type": "WEB",
      "url": "http://seclists.org/fulldisclosure/2024/Sep/33"
    },
    {
      "type": "WEB",
      "url": "http://seclists.org/fulldisclosure/2024/Sep/36"
    },
    {
      "type": "WEB",
      "url": "http://seclists.org/fulldisclosure/2024/Sep/40"
    },
    {
      "type": "WEB",
      "url": "http://seclists.org/fulldisclosure/2024/Sep/41"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
      "type": "CVSS_V3"
    }
  ]
}

NCSC-2024-0381

Vulnerability from csaf_ncscnl - Published: 2024-09-26 08:48 - Updated: 2024-09-26 08:48

Summary

Kwetsbaarheden verholpen in Apple MacOS

Scope

80 vulnerabilities in this advisory, including CVE-2024-44169.

CVE-2024-44169

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Known affected: 3 products

Open the full advisory

NCSC-2024-0382

Vulnerability from csaf_ncscnl - Published: 2024-09-26 08:52 - Updated: 2024-09-26 08:52

Summary

Kwetsbaarheden verholpen in Apple iOS en iPadOS

Scope

36 vulnerabilities in this advisory, including CVE-2024-44169.

CVE-2024-44169

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Known affected: 4 products

Open the full advisory

NCSC-2024-0457

Vulnerability from csaf_ncscnl - Published: 2024-11-20 10:01 - Updated: 2024-11-20 10:01

Summary

Kwetsbaarheden verholpen in Apple iOS en iPadOS

Scope

40 vulnerabilities in this advisory, including CVE-2024-44169.

CVE-2024-44169

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Known affected: 4 products

Open the full advisory

WID-SEC-W-2024-2153

Vulnerability from csaf_certbund - Published: 2024-09-16 22:00 - Updated: 2025-04-24 22:00

Summary

Apple iOS und iPadOS: Mehrere Schwachstellen

Severity

Hoch

Scope

39 vulnerabilities in this advisory, including CVE-2024-44169.

CVE-2024-44169

Known affected: 4 products

Open the full advisory

WID-SEC-W-2024-2154

Vulnerability from csaf_certbund - Published: 2024-09-16 22:00 - Updated: 2025-03-11 23:00

Summary

Apple macOS: Mehrere Schwachstellen

Severity

Hoch

Scope

112 vulnerabilities in this advisory, including CVE-2024-44169.

CVE-2024-44169

Known affected: 3 products

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2024-44169 (GCVE-0-2024-44169)

Solutions

Tags

Sightings

Nomenclature

Related by attack behaviour