macOS

macOS 14.4

macOS 14.4, publié le 2024-03-07, corrige 79 CVE, dont 2 activement exploitées (CISA KEV). Les versions antérieures restent exposées à ces vulnérabilités.

Date de sortie: 2024-03-07
Fin de support: 2026-09-14 · EOL
CVE corrigées: 79
KEV CISA: 2

CVE corrigées

CVE	Sévérité	KEV	Publié
CVE-2024-23225 HIGH 7.8 KEV 2024-03-05 A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Monterey…	HIGH 7.8	KEV	2024-03-05
CVE-2024-23296 HIGH 7.8 KEV 2024-03-05 A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.4 and iPadOS 17.4, macOS Monterey…	HIGH 7.8	KEV	2024-03-05
CVE-2024-27859 HIGH 8.8 2025-02-10 The issue was addressed with improved memory handling. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, watchOS 10.…	HIGH 8.8	—	2025-02-10
CVE-2024-23226 HIGH 8.8 2024-03-08 The issue was addressed with improved memory handling. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, watchOS 10.…	HIGH 8.8	—	2024-03-08
CVE-2024-23299 HIGH 8.6 2024-06-10 The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app may be able to brea…	HIGH 8.6	—	2024-06-10
CVE-2024-23278 HIGH 8.6 2024-03-08 The issue was addressed with improved checks. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, macOS Ventura 1…	HIGH 8.6	—	2024-03-08
CVE-2024-23246 HIGH 8.6 2024-03-08 This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvO…	HIGH 8.6	—	2024-03-08
CVE-2024-0258 HIGH 8.6 2024-03-08 The issue was addressed with improved memory handling. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS 10.4. An app may …	HIGH 8.6	—	2024-03-08
CVE-2024-23288 HIGH 7.8 2024-03-08 This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS 10.4. An app m…	HIGH 7.8	—	2024-03-08
CVE-2024-23294 HIGH 7.8 2024-03-08 This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14.4. Processing malicious input may lead to code execution.	HIGH 7.8	—	2024-03-08
CVE-2024-23265 HIGH 7.8 2024-03-08 A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Mon…	HIGH 7.8	—	2024-03-08
CVE-2024-23268 HIGH 7.8 2024-03-08 An injection issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app …	HIGH 7.8	—	2024-03-08
CVE-2024-23270 HIGH 7.8 2024-03-08 The issue was addressed with improved memory handling. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura…	HIGH 7.8	—	2024-03-08
CVE-2024-23274 HIGH 7.8 2024-03-08 An injection issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app …	HIGH 7.8	—	2024-03-08
CVE-2024-23276 HIGH 7.8 2024-03-08 A logic issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app may be able to …	HIGH 7.8	—	2024-03-08
CVE-2024-23286 HIGH 7.8 2024-03-08 A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Monte…	HIGH 7.8	—	2024-03-08
CVE-2024-23244 HIGH 7.8 2024-03-08 A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4. An app from a standard user account ma…	HIGH 7.8	—	2024-03-08
CVE-2024-23247 HIGH 7.8 2024-03-08 The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. Processing a file…	HIGH 7.8	—	2024-03-08
CVE-2024-23258 HIGH 7.8 2024-03-08 An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Sonoma 14.4, visionOS 1.1. Processing an image may lead to arb…	HIGH 7.8	—	2024-03-08
CVE-2024-23233 HIGH 7.8 2024-03-08 This issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.4. Entitlements and privacy permissions granted to this app may be used b…	HIGH 7.8	—	2024-03-08
CVE-2024-23261 HIGH 7.5 2024-07-29 A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.4, macOS Ventura 13.6.8. An attacker …	HIGH 7.5	—	2024-07-29
CVE-2024-23248 HIGH 7.1 2024-03-08 The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.4. Processing a file may lead to a denial-of-service or potential…	HIGH 7.1	—	2024-03-08
CVE-2024-23249 HIGH 7.1 2024-03-08 The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.4. Processing a file may lead to a denial-of-service or potential…	HIGH 7.1	—	2024-03-08
CVE-2024-23216 HIGH 7.1 2024-03-08 A path handling issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app may…	HIGH 7.1	—	2024-03-08
CVE-2024-23234 MEDIUM 6.7 2024-03-08 An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.…	MEDIUM 6.7	—	2024-03-08
CVE-2024-54658 MEDIUM 6.5 2025-02-10 The issue was addressed with improved memory handling. This issue is fixed in Safari 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1…	MEDIUM 6.5	—	2025-02-10
CVE-2023-51385 MEDIUM 6.5 2024-06-11 Microsoft Security Update Guide entry — NVD enrichira.	MEDIUM 6.5	—	2024-06-11
CVE-2024-23280 MEDIUM 6.5 2024-03-08 An injection issue was addressed with improved validation. This issue is fixed in Safari 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS …	MEDIUM 6.5	—	2024-03-08
CVE-2024-23284 MEDIUM 6.5 2024-03-08 A logic issue was addressed with improved state management. This issue is fixed in Safari 17.4, iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS S…	MEDIUM 6.5	—	2024-03-08
CVE-2024-23254 MEDIUM 6.5 2024-03-08 The issue was addressed with improved UI handling. This issue is fixed in Safari 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, wa…	MEDIUM 6.5	—	2024-03-08
CVE-2024-23259 MEDIUM 6.5 2024-03-08 The issue was addressed with improved checks. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4. Processing web …	MEDIUM 6.5	—	2024-03-08
CVE-2024-23263 MEDIUM 6.5 2024-03-08 A logic issue was addressed with improved validation. This issue is fixed in Safari 17.4, iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma …	MEDIUM 6.5	—	2024-03-08
CVE-2023-48795 Exploit MEDIUM 5.9 2024-11-12 Microsoft Security Update Guide entry — NVD enrichira.	MEDIUM 5.9	—	2024-11-12
CVE-2024-23277 MEDIUM 5.9 2024-03-08 The issue was addressed with improved checks. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4. An attacker in a privileged network position …	MEDIUM 5.9	—	2024-03-08
CVE-2022-48554 MEDIUM 5.5 2024-12-10 Microsoft Security Update Guide entry — NVD enrichira.	MEDIUM 5.5	—	2024-12-10
CVE-2024-27886 MEDIUM 5.5 2024-07-29 A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sonoma 14.4, macOS Ventura 13.7. An unprivileged app may be able to log ke…	MEDIUM 5.5	—	2024-07-29
CVE-2024-27887 MEDIUM 5.5 2024-07-29 A path handling issue was addressed with improved validation. This issue is fixed in macOS Sonoma 14.4. An app may be able to access user-sensitive data.	MEDIUM 5.5	—	2024-07-29
CVE-2024-27888 MEDIUM 5.5 2024-07-29 A permissions issue was addressed by removing vulnerable code and adding additional checks. This issue is fixed in macOS Sonoma 14.4. An app may be able to mod…	MEDIUM 5.5	—	2024-07-29
CVE-2024-27809 MEDIUM 5.5 2024-07-29 A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma 14.4. An app may be able to access user…	MEDIUM 5.5	—	2024-07-29
CVE-2024-27792 MEDIUM 5.5 2024-06-10 This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Sonoma 14.4. An app may be able to access user-sensitive…	MEDIUM 5.5	—	2024-06-10
CVE-2024-27789 MEDIUM 5.5 2024-05-14 A logic issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, macOS Monterey 12.7.5, macOS Sonoma 14.4, macOS Ventura …	MEDIUM 5.5	—	2024-05-14
CVE-2024-23229 MEDIUM 5.5 2024-05-14 This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Monterey 12.7.5, macOS Sonoma 14.4, macOS Ventura 13.6.…	MEDIUM 5.5	—	2024-05-14
CVE-2024-23287 MEDIUM 5.5 2024-03-08 A privacy issue was addressed with improved handling of temporary files. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, watchOS 10.4. An a…	MEDIUM 5.5	—	2024-03-08
CVE-2024-23290 MEDIUM 5.5 2024-03-08 A logic issue was addressed with improved restrictions. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS 10.4. An app may…	MEDIUM 5.5	—	2024-03-08
CVE-2024-23264 MEDIUM 5.5 2024-03-08 A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Montere…	MEDIUM 5.5	—	2024-03-08
CVE-2024-23266 MEDIUM 5.5 2024-03-08 The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app may be able to modi…	MEDIUM 5.5	—	2024-03-08
CVE-2024-23267 MEDIUM 5.5 2024-03-08 The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app may be able to bypa…	MEDIUM 5.5	—	2024-03-08
CVE-2024-23269 MEDIUM 5.5 2024-03-08 A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Monterey 12.7.4, ma…	MEDIUM 5.5	—	2024-03-08
CVE-2024-23272 MEDIUM 5.5 2024-03-08 A logic issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An attacker may gain a…	MEDIUM 5.5	—	2024-03-08
CVE-2024-23279 MEDIUM 5.5 2024-03-08 A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma 14.4. An app may be able to access user…	MEDIUM 5.5	—	2024-03-08
CVE-2024-23281 MEDIUM 5.5 2024-03-08 This issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14.4. An app may be able to access sensitive user data.	MEDIUM 5.5	—	2024-03-08
CVE-2024-23283 MEDIUM 5.5 2024-03-08 A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, macOS Monterey 12.7.4,…	MEDIUM 5.5	—	2024-03-08
CVE-2024-23285 MEDIUM 5.5 2024-03-08 This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sonoma 14.4. An app may be able to create symlinks to protected regio…	MEDIUM 5.5	—	2024-03-08
CVE-2024-23241 MEDIUM 5.5 2024-03-08 This issue was addressed through improved state management. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4. An app may be able t…	MEDIUM 5.5	—	2024-03-08
CVE-2024-23250 MEDIUM 5.5 2024-03-08 An access issue was addressed with improved access restrictions. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS 10.4. A…	MEDIUM 5.5	—	2024-03-08
CVE-2024-23260 MEDIUM 5.5 2024-03-08 This issue was addressed by removing additional entitlements. This issue is fixed in macOS Sonoma 14.4. An app may be able to access user-sensitive data.	MEDIUM 5.5	—	2024-03-08
CVE-2024-23205 MEDIUM 5.5 2024-03-08 A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4. An app …	MEDIUM 5.5	—	2024-03-08
CVE-2024-23230 MEDIUM 5.5 2024-03-08 This issue was addressed with improved file handling. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app may be able…	MEDIUM 5.5	—	2024-03-08
CVE-2024-23231 MEDIUM 5.5 2024-03-08 A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17…	MEDIUM 5.5	—	2024-03-08
CVE-2023-42853 MEDIUM 5.5 2024-02-21 A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, macOS Ventura 13.6.1. An app may be able to …	MEDIUM 5.5	—	2024-02-21
CVE-2022-42816 MEDIUM 5.5 2024-01-10 A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13. An app may be able to modify protected parts of the file s…	MEDIUM 5.5	—	2024-01-10
CVE-2023-51384 MEDIUM 5.5 2023-12-18 In ssh-agent in OpenSSH before 9.6, certain destination constraints can be incompletely applied. When destination constraints are specified during addition of …	MEDIUM 5.5	—	2023-12-18
CVE-2024-23275 MEDIUM 4.7 2024-03-08 A race condition was addressed with additional validation. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app may be…	MEDIUM 4.7	—	2024-03-08
CVE-2024-23239 MEDIUM 4.7 2024-03-08 A race condition was addressed with improved state handling. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS 10.4. An ap…	MEDIUM 4.7	—	2024-03-08
CVE-2024-23235 MEDIUM 4.7 2024-03-08 A race condition was addressed with additional validation. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tv…	MEDIUM 4.7	—	2024-03-08
CVE-2024-23293 MEDIUM 4.6 2024-03-08 This issue was addressed through improved state management. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS 10.4. An att…	MEDIUM 4.6	—	2024-03-08
CVE-2024-27853 MEDIUM 4.4 2024-07-29 This issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.4. A maliciously crafted ZIP archive may bypass Gatekeeper checks.	MEDIUM 4.4	—	2024-07-29
CVE-2024-23273 MEDIUM 4.3 2024-03-08 This issue was addressed through improved state management. This issue is fixed in Safari 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4. Private Browsing t…	MEDIUM 4.3	—	2024-03-08
CVE-2024-23289 LOW 3.3 2024-03-08 A lock screen issue was addressed with improved state management. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma 1…	LOW 3.3	—	2024-03-08
CVE-2024-23291 LOW 3.3 2024-03-08 A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17…	LOW 3.3	—	2024-03-08
CVE-2024-23292 LOW 3.3 2024-03-08 This issue was addressed with improved data protection. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4. An app may be able to access inform…	LOW 3.3	—	2024-03-08
CVE-2024-23238 LOW 3.3 2024-03-08 An access issue was addressed with improved access restrictions. This issue is fixed in macOS Sonoma 14.4. An app may be able to edit NVRAM variables.	LOW 3.3	—	2024-03-08
CVE-2024-23242 LOW 3.3 2024-03-08 A privacy issue was addressed by not logging contents of text fields. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4. An app may be able to…	LOW 3.3	—	2024-03-08
CVE-2024-23245 LOW 3.3 2024-03-08 This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5…	LOW 3.3	—	2024-03-08
CVE-2024-23253 LOW 3.3 2024-03-08 A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.4. An app may be able to access a user's Photos Library.	LOW 3.3	—	2024-03-08
CVE-2024-23257 LOW 3.3 2024-03-08 The issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ven…	LOW 3.3	—	2024-03-08
CVE-2024-23227 LOW 3.3 2024-03-08 This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.…	LOW 3.3	—	2024-03-08
CVE-2024-23232 LOW 3.3 2024-03-08 A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Sonoma 14.4. An app may be able to capture a user's scree…	LOW 3.3	—	2024-03-08
CVE-2024-23255 LOW 2.4 2024-03-08 An authentication issue was addressed with improved state management. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4. Photos in the Hidden …	LOW 2.4	—	2024-03-08

Déployer cette mise à jour macOS sur votre flotte

Appaloosa déploie et contrôle les mises à jour macOS sur tout votre parc.

Gérer macOS avec Appaloosa