macOS 14.6

Microsoft Security Update Guide entry — NVD enrichira.

RedHat Openssh: CVE-2024-6387 Remote Code Execution Due To A Race Condition In Signal Handling

[Apple ImageIO] Processing an image may lead to a denial-of-service

Apache HTTP Server: HTTP/2 DoS by memory exhaustion on endless continuation frames

Microsoft Security Update Guide entry — NVD enrichira.

Microsoft Security Update Guide entry — NVD enrichira.

Microsoft Security Update Guide entry — NVD enrichira.

Microsoft Security Update Guide entry — NVD enrichira.

Microsoft Security Update Guide entry — NVD enrichira.

Microsoft Security Update Guide entry — NVD enrichira.

[Apple AppleMobileFileIntegrity] An app may be able to bypass Privacy preferences

[Apple Safari] An app may bypass Gatekeeper checks

[Apple Setup Assistant] Enabling Lockdown Mode while setting up a Mac may cause FileVault to become unexpectedly disabl…

[Apple Kernel] A local attacker may be able to determine kernel memory layout

[Apple Sandbox] An app may be able to access protected user data

[Apple Security Initialization] An app may be able to access protected user data

[Apple CoreMedia] Processing a maliciously crafted video file may lead to unexpected app termination

[Apple AppleVA] Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory co…

[Apple ASP TCP] An app may be able to execute arbitrary code with kernel privileges

[Apple Scripting Bridge] An app may be able to access information about a user’s contacts

[Apple PackageKit] An app may be able to modify protected parts of the file system

[Apple PackageKit] An app may be able to modify protected parts of the file system

[Apple AppleMobileFileIntegrity] An app may be able to bypass Privacy preferences

[Apple AppleMobileFileIntegrity] An app may be able to leak sensitive user information

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process crash

[Apple ImageIO] Processing a maliciously crafted file may lead to unexpected app termination

[Apple Photos Storage] Photos in the Hidden Photos Album may be viewed without authentication

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process crash

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process crash

[Apple PackageKit] A local attacker may be able to elevate their privileges

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process crash

[Apple APFS] A malicious application may be able to bypass Privacy preferences

[Apple ImageIO] Processing a maliciously crafted file may lead to unexpected app termination

[Apple WebKit] Processing maliciously crafted web content may lead to a cross site scripting attack

[Apple Shortcuts] A shortcut may be able to bypass Internet permission requirements

[Apple Kernel] A local attacker may be able to cause unexpected system shutdown

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process crash

[Apple Shortcuts] An app may be able to access user-sensitive data

[Apple WebKit] Private Browsing tabs may be accessed without authentication

[Apple Family Sharing] An app may be able to read sensitive location information

[Apple NetworkExtension] Private browsing may leak some browsing history

[Apple Security] An app may be able to read Safari's browsing history

[Apple CoreGraphics] Processing a maliciously crafted file may lead to unexpected app termination

[Apple Restore Framework] An app may be able to modify protected parts of the file system

[Apple PackageKit] A local attacker may be able to elevate their privileges

[Apple Keychain Access] An attacker may be able to cause unexpected app termination

[Apple Accounts] A malicious application may be able to access private information

[Apple libxpc] An app may be able to bypass Privacy preferences

[Apple ImageIO] Processing a maliciously crafted file may lead to unexpected app termination

[Apple Shortcuts] A shortcut may be able to use sensitive data with certain actions without prompting the user

[Apple Shortcuts] A shortcut may be able to bypass Internet permission requirements

[Apple IOMobileFrameBuffer] An app may be able to cause a coprocessor crash

[Apple sudo] An app may be able to modify protected parts of the file system

[Apple Shortcuts] A shortcut may be able to bypass Internet permission requirements

[Apple dyld] A malicious attacker with arbitrary read and write capability may be able to bypass Pointer Authentication

[Apple Kernel] A local attacker may be able to cause unexpected system shutdown

[Apple Safari] Visiting a website that frames malicious content may lead to UI spoofing

[Apple Siri] An attacker with physical access may be able to use Siri to access sensitive user data

[Apple Security] Third party app extensions may not receive the correct sandbox restrictions

[Apple Siri] An attacker with physical access to a device may be able to access contacts from the lock screen

[Apple PackageKit] An app may be able to access user-sensitive data

[Apple Sandbox] An app may be able to bypass Privacy preferences

[Apple DesktopServices] An app may be able to overwrite arbitrary files

[Apple Disk Management] A malicious app may be able to gain root privileges

[Apple Messages] An app may be able to view a contact's phone number in system logs

[Apple Shortcuts] A shortcut may be able to use sensitive data with certain actions without prompting the user

[Apple Shortcuts] A shortcut may be able to bypass sensitive Shortcuts app settings

[Apple Shortcuts] A shortcut may be able to use sensitive data with certain actions without prompting the user

[Apple Shortcuts] A shortcut may be able to use sensitive data with certain actions without prompting the user

[Apple DiskArbitration] A person with physical access to an unlocked Mac may be able to gain root code execution

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process crash

[Apple IOMobileFrameBuffer] An app may be able to cause unexpected system termination or read kernel memory

[Apple Siri] A sandboxed app may be able to access sensitive user data in system logs

[Apple WebKit] A user may be able to bypass some web content restrictions

[Apple PackageKit] An app may be able to gain root privileges

[Apple ASP TCP] An app may be able to execute arbitrary code with kernel privileges

[Apple ASP TCP] An app may be able to execute arbitrary code with kernel privileges

[Apple WebKit] Processing web content may lead to a denial-of-service

[Apple AirDrop] A file received from AirDrop may not have the quarantine flag applied

Chromium: CVE-2024-4558 Use after free in ANGLE