{
  "fix": "Sonoma 14.6",
  "url": "https://patchblox.com/security/fix/macos/sonoma-14.6",
  "summary": "Sonoma 14.6, released July 29, 2024, fixes 67 CVEs in Sonoma. None of them is reported as exploited. Patch Radar priority: Urgent.",
  "platform": "macos",
  "type": "os-version",
  "title": "Sonoma 14.6",
  "released": "2024-07-29T00:00:00Z",
  "priority": "Urgent",
  "priorityTier": 2,
  "priorityReason": "Closes CVE-2024-6387, rated Critical",
  "supported": true,
  "cveCount": 67,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.99506,
  "maxCvss": 9.6,
  "vendorAdvisory": "https://support.apple.com/en-us/120911",
  "appliesTo": [
    {
      "product": "Sonoma",
      "productUrl": "https://patchblox.com/security/product/macos/sonoma",
      "fixedVersion": "14.6",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2024-6387",
      "url": "https://patchblox.com/security/cve/CVE-2024-6387",
      "title": "RedHat Openssh: CVE-2024-6387  Remote Code Execution Due To A Race Condition In Signal Handling",
      "component": "OpenSSH",
      "impact": "A remote attacker may be able to cause arbitrary code execution",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 8.1,
      "epss": 0.99506,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-2398",
      "url": "https://patchblox.com/security/cve/CVE-2024-2398",
      "title": "curl: Multiple issues in curl",
      "component": "curl",
      "impact": "Multiple issues in curl",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.6,
      "epss": 0.36081,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-38709",
      "url": "https://patchblox.com/security/cve/CVE-2023-38709",
      "title": "apache: Multiple issues in apache",
      "component": "apache",
      "impact": "Multiple issues in apache",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.3,
      "epss": 0.03914,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-52356",
      "url": "https://patchblox.com/security/cve/CVE-2023-52356",
      "title": "ImageIO: Processing an image may lead to a denial-of-service",
      "component": "ImageIO",
      "impact": "Processing an image may lead to a denial-of-service",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.5,
      "epss": 0.02506,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-4558",
      "url": "https://patchblox.com/security/cve/CVE-2024-4558",
      "title": "Chromium: CVE-2024-4558 Use after free in ANGLE",
      "component": "WebKit",
      "impact": "Processing maliciously crafted web content may lead to an unexpected process crash",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 9.6,
      "epss": 0.01533,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40803",
      "url": "https://patchblox.com/security/cve/CVE-2024-40803",
      "title": "Keychain Access: An attacker may be able to cause unexpected app termination",
      "component": "Keychain Access",
      "impact": "An attacker may be able to cause unexpected app termination",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.5,
      "epss": 0.01224,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40815",
      "url": "https://patchblox.com/security/cve/CVE-2024-40815",
      "title": "dyld: A malicious attacker with arbitrary read and write capability may be able to bypass Pointer Authentication",
      "component": "dyld",
      "impact": "A malicious attacker with arbitrary read and write capability may be able to bypass Pointer Authentication",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.5,
      "epss": 0.0109,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54551",
      "url": "https://patchblox.com/security/cve/CVE-2024-54551",
      "title": "WebKit: Processing web content may lead to a denial-of-service",
      "component": "WebKit",
      "impact": "Processing web content may lead to a denial-of-service",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.8,
      "epss": 0.00647,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40799",
      "url": "https://patchblox.com/security/cve/CVE-2024-40799",
      "title": "CoreGraphics: Processing a maliciously crafted file may lead to unexpected app termination",
      "component": "CoreGraphics",
      "impact": "Processing a maliciously crafted file may lead to unexpected app termination",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.1,
      "epss": 0.00426,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40800",
      "url": "https://patchblox.com/security/cve/CVE-2024-40800",
      "title": "Restore Framework: An app may be able to modify protected parts of the file system",
      "component": "Restore Framework",
      "impact": "An app may be able to modify protected parts of the file system",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.4,
      "epss": 0.0034,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40787",
      "url": "https://patchblox.com/security/cve/CVE-2024-40787",
      "title": "Shortcuts: A shortcut may be able to bypass Internet permission requirements",
      "component": "Shortcuts",
      "impact": "A shortcut may be able to bypass Internet permission requirements",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.1,
      "epss": 0.00332,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40809",
      "url": "https://patchblox.com/security/cve/CVE-2024-40809",
      "title": "Shortcuts: A shortcut may be able to bypass Internet permission requirements",
      "component": "Shortcuts",
      "impact": "A shortcut may be able to bypass Internet permission requirements",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.0033,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40783",
      "url": "https://patchblox.com/security/cve/CVE-2024-40783",
      "title": "APFS: A malicious application may be able to bypass Privacy preferences",
      "component": "APFS",
      "impact": "A malicious application may be able to bypass Privacy preferences",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.1,
      "epss": 0.00312,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40784",
      "url": "https://patchblox.com/security/cve/CVE-2024-40784",
      "title": "ImageIO: Processing a maliciously crafted file may lead to unexpected app termination",
      "component": "ImageIO",
      "impact": "Processing a maliciously crafted file may lead to unexpected app termination",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.0029,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40824",
      "url": "https://patchblox.com/security/cve/CVE-2024-40824",
      "title": "Sandbox: An app may be able to bypass Privacy preferences",
      "component": "Sandbox",
      "impact": "An app may be able to bypass Privacy preferences",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.7,
      "epss": 0.00279,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40828",
      "url": "https://patchblox.com/security/cve/CVE-2024-40828",
      "title": "StorageKit: A malicious app may be able to gain root privileges",
      "component": "StorageKit",
      "impact": "A malicious app may be able to gain root privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.4,
      "epss": 0.00261,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40805",
      "url": "https://patchblox.com/security/cve/CVE-2024-40805",
      "title": "libxpc: An app may be able to bypass Privacy preferences",
      "component": "libxpc",
      "impact": "An app may be able to bypass Privacy preferences",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.7,
      "epss": 0.00238,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40781",
      "url": "https://patchblox.com/security/cve/CVE-2024-40781",
      "title": "PackageKit: A local attacker may be able to elevate their privileges",
      "component": "PackageKit",
      "impact": "A local attacker may be able to elevate their privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.4,
      "epss": 0.00237,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40821",
      "url": "https://patchblox.com/security/cve/CVE-2024-40821",
      "title": "Security: Third party app extensions may not receive the correct sandbox restrictions",
      "component": "Security",
      "impact": "Third party app extensions may not receive the correct sandbox restrictions",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.4,
      "epss": 0.00227,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40811",
      "url": "https://patchblox.com/security/cve/CVE-2024-40811",
      "title": "sudo: An app may be able to modify protected parts of the file system",
      "component": "sudo",
      "impact": "An app may be able to modify protected parts of the file system",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.4,
      "epss": 0.00217,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-44199",
      "url": "https://patchblox.com/security/cve/CVE-2024-44199",
      "title": "IOMobileFrameBuffer: An app may be able to cause unexpected system termination or read kernel memory",
      "component": "IOMobileFrameBuffer",
      "impact": "An app may be able to cause unexpected system termination or read kernel memory",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.1,
      "epss": 0.00185,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-44305",
      "url": "https://patchblox.com/security/cve/CVE-2024-44305",
      "title": "PackageKit: An app may be able to gain root privileges",
      "component": "PackageKit",
      "impact": "An app may be able to gain root privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00157,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40777",
      "url": "https://patchblox.com/security/cve/CVE-2024-40777",
      "title": "ImageIO: Processing a maliciously crafted file may lead to unexpected app termination",
      "component": "ImageIO",
      "impact": "Processing a maliciously crafted file may lead to unexpected app termination",
      "priority": "Routine",
      "severity": "LOW",
      "cvss": 3.3,
      "epss": 0.07697,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-2379",
      "url": "https://patchblox.com/security/cve/CVE-2024-2379",
      "title": "curl: Multiple issues in curl",
      "component": "curl",
      "impact": "Multiple issues in curl",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.3,
      "epss": 0.01863,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-6277",
      "url": "https://patchblox.com/security/cve/CVE-2023-6277",
      "title": "ImageIO: Processing an image may lead to a denial-of-service",
      "component": "ImageIO",
      "impact": "Processing an image may lead to a denial-of-service",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.5,
      "epss": 0.01825,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-2004",
      "url": "https://patchblox.com/security/cve/CVE-2024-2004",
      "title": "curl: Multiple issues in curl",
      "component": "curl",
      "impact": "Multiple issues in curl",
      "priority": "Routine",
      "severity": "LOW",
      "cvss": 3.5,
      "epss": 0.01681,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-2466",
      "url": "https://patchblox.com/security/cve/CVE-2024-2466",
      "title": "curl: Multiple issues in curl",
      "component": "curl",
      "impact": "Multiple issues in curl",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.5,
      "epss": 0.01453,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40794",
      "url": "https://patchblox.com/security/cve/CVE-2024-40794",
      "title": "WebKit: Private Browsing tabs may be accessed without authentication",
      "component": "WebKit",
      "impact": "Private Browsing tabs may be accessed without authentication",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.3,
      "epss": 0.01179,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40789",
      "url": "https://patchblox.com/security/cve/CVE-2024-40789",
      "title": "WebKit: Processing maliciously crafted web content may lead to an unexpected process crash",
      "component": "WebKit",
      "impact": "Processing maliciously crafted web content may lead to an unexpected process crash",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.5,
      "epss": 0.01148,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40776",
      "url": "https://patchblox.com/security/cve/CVE-2024-40776",
      "title": "WebKit: Processing maliciously crafted web content may lead to an unexpected process crash",
      "component": "WebKit",
      "impact": "Processing maliciously crafted web content may lead to an unexpected process crash",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.5,
      "epss": 0.01006,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40796",
      "url": "https://patchblox.com/security/cve/CVE-2024-40796",
      "title": "NetworkExtension: Private browsing may leak some browsing history",
      "component": "NetworkExtension",
      "impact": "Private browsing may leak some browsing history",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.3,
      "epss": 0.009,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-27881",
      "url": "https://patchblox.com/security/cve/CVE-2024-27881",
      "title": "Scripting Bridge: An app may be able to access information about a user\u2019s contacts",
      "component": "Scripting Bridge",
      "impact": "An app may be able to access information about a user\u2019s contacts",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.3,
      "epss": 0.00834,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40785",
      "url": "https://patchblox.com/security/cve/CVE-2024-40785",
      "title": "WebKit: Processing maliciously crafted web content may lead to a cross site scripting attack",
      "component": "WebKit",
      "impact": "Processing maliciously crafted web content may lead to a cross site scripting attack",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.1,
      "epss": 0.00781,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40817",
      "url": "https://patchblox.com/security/cve/CVE-2024-40817",
      "title": "Safari: Visiting a website that frames malicious content may lead to UI spoofing",
      "component": "Safari",
      "impact": "Visiting a website that frames malicious content may lead to UI spoofing",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.1,
      "epss": 0.00693,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-27862",
      "url": "https://patchblox.com/security/cve/CVE-2024-27862",
      "title": "Setup Assistant: Enabling Lockdown Mode while setting up a Mac may cause FileVault to become unexpectedly disabled",
      "component": "Setup Assistant",
      "impact": "Enabling Lockdown Mode while setting up a Mac may cause FileVault to become unexpectedly disabled",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.3,
      "epss": 0.00552,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-44206",
      "url": "https://patchblox.com/security/cve/CVE-2024-44206",
      "title": "WebKit: A user may be able to bypass some web content restrictions",
      "component": "WebKit",
      "impact": "A user may be able to bypass some web content restrictions",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.4,
      "epss": 0.00455,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-27877",
      "url": "https://patchblox.com/security/cve/CVE-2024-27877",
      "title": "AppleVA: Processing a maliciously crafted file may lead to unexpected app termination",
      "component": "AppleVA",
      "impact": "Processing a maliciously crafted file may lead to unexpected app termination",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.1,
      "epss": 0.00433,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40818",
      "url": "https://patchblox.com/security/cve/CVE-2024-40818",
      "title": "Siri: An attacker with physical access may be able to use Siri to access sensitive user data",
      "component": "Siri",
      "impact": "An attacker with physical access may be able to use Siri to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 4.6,
      "epss": 0.00413,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40822",
      "url": "https://patchblox.com/security/cve/CVE-2024-40822",
      "title": "Siri: An attacker with physical access to a device may be able to access contacts from the lock screen",
      "component": "Siri",
      "impact": "An attacker with physical access to a device may be able to access contacts from the lock screen",
      "priority": "Routine",
      "severity": "LOW",
      "cvss": 2.4,
      "epss": 0.00408,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54564",
      "url": "https://patchblox.com/security/cve/CVE-2024-54564",
      "title": "AirDrop: A file received from AirDrop may not have the quarantine flag applied",
      "component": "AirDrop",
      "impact": "A file received from AirDrop may not have the quarantine flag applied",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.5,
      "epss": 0.00375,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40779",
      "url": "https://patchblox.com/security/cve/CVE-2024-40779",
      "title": "WebKit: Processing maliciously crafted web content may lead to an unexpected process crash",
      "component": "WebKit",
      "impact": "Processing maliciously crafted web content may lead to an unexpected process crash",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.5,
      "epss": 0.00337,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40806",
      "url": "https://patchblox.com/security/cve/CVE-2024-40806",
      "title": "ImageIO: Processing a maliciously crafted file may lead to unexpected app termination",
      "component": "ImageIO",
      "impact": "Processing a maliciously crafted file may lead to unexpected app termination",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00336,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40774",
      "url": "https://patchblox.com/security/cve/CVE-2024-40774",
      "title": "AppleMobileFileIntegrity: An app may be able to bypass Privacy preferences",
      "component": "AppleMobileFileIntegrity",
      "impact": "An app may be able to bypass Privacy preferences",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.9,
      "epss": 0.00331,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40795",
      "url": "https://patchblox.com/security/cve/CVE-2024-40795",
      "title": "Family Sharing: An app may be able to read sensitive location information",
      "component": "Family Sharing",
      "impact": "An app may be able to read sensitive location information",
      "priority": "Routine",
      "severity": "LOW",
      "cvss": 3.3,
      "epss": 0.0033,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-27878",
      "url": "https://patchblox.com/security/cve/CVE-2024-27878",
      "title": "ASP TCP: An app may be able to execute arbitrary code with kernel privileges",
      "component": "ASP TCP",
      "impact": "An app may be able to execute arbitrary code with kernel privileges",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.5,
      "epss": 0.00328,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40788",
      "url": "https://patchblox.com/security/cve/CVE-2024-40788",
      "title": "Kernel: A local attacker may be able to cause unexpected system shutdown",
      "component": "Kernel",
      "impact": "A local attacker may be able to cause unexpected system shutdown",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.2,
      "epss": 0.00316,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40798",
      "url": "https://patchblox.com/security/cve/CVE-2024-40798",
      "title": "Security: An app may be able to read Safari\u0027s browsing history",
      "component": "Security",
      "impact": "An app may be able to read Safari\u0027s browsing history",
      "priority": "Routine",
      "severity": "LOW",
      "cvss": 3.3,
      "epss": 0.00311,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40793",
      "url": "https://patchblox.com/security/cve/CVE-2024-40793",
      "title": "Shortcuts: An app may be able to access user-sensitive data",
      "component": "Shortcuts",
      "impact": "An app may be able to access user-sensitive data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00303,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-27882",
      "url": "https://patchblox.com/security/cve/CVE-2024-27882",
      "title": "PackageKit: An app may be able to modify protected parts of the file system",
      "component": "PackageKit",
      "impact": "An app may be able to modify protected parts of the file system",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 4.4,
      "epss": 0.003,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-27863",
      "url": "https://patchblox.com/security/cve/CVE-2024-27863",
      "title": "Kernel: A local attacker may be able to determine kernel memory layout",
      "component": "Kernel",
      "impact": "A local attacker may be able to determine kernel memory layout",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00297,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40833",
      "url": "https://patchblox.com/security/cve/CVE-2024-40833",
      "title": "Shortcuts: A shortcut may be able to use sensitive data with certain actions without prompting the user",
      "component": "Shortcuts",
      "impact": "A shortcut may be able to use sensitive data with certain actions without prompting the user",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.2,
      "epss": 0.00296,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40778",
      "url": "https://patchblox.com/security/cve/CVE-2024-40778",
      "title": "Photos Storage: Photos in the Hidden Photos Album may be viewed without authentication",
      "component": "Photos Storage",
      "impact": "Photos in the Hidden Photos Album may be viewed without authentication",
      "priority": "Routine",
      "severity": "LOW",
      "cvss": 3.3,
      "epss": 0.00294,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-27873",
      "url": "https://patchblox.com/security/cve/CVE-2024-27873",
      "title": "CoreMedia: Processing a maliciously crafted video file may lead to unexpected app termination",
      "component": "CoreMedia",
      "impact": "Processing a maliciously crafted video file may lead to unexpected app termination",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.0029,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-44185",
      "url": "https://patchblox.com/security/cve/CVE-2024-44185",
      "title": "WebKit: Processing maliciously crafted web content may lead to an unexpected process crash",
      "component": "WebKit",
      "impact": "Processing maliciously crafted web content may lead to an unexpected process crash",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00289,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40823",
      "url": "https://patchblox.com/security/cve/CVE-2024-40823",
      "title": "PackageKit: An app may be able to access user-sensitive data",
      "component": "PackageKit",
      "impact": "An app may be able to access user-sensitive data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00288,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40775",
      "url": "https://patchblox.com/security/cve/CVE-2024-40775",
      "title": "AppleMobileFileIntegrity: An app may be able to leak sensitive user information",
      "component": "AppleMobileFileIntegrity",
      "impact": "An app may be able to leak sensitive user information",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00276,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-27871",
      "url": "https://patchblox.com/security/cve/CVE-2024-27871",
      "title": "Sandbox: An app may be able to access protected user data",
      "component": "Sandbox",
      "impact": "An app may be able to access protected user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00262,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40827",
      "url": "https://patchblox.com/security/cve/CVE-2024-40827",
      "title": "DesktopServices: An app may be able to overwrite arbitrary files",
      "component": "DesktopServices",
      "impact": "An app may be able to overwrite arbitrary files",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00262,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40834",
      "url": "https://patchblox.com/security/cve/CVE-2024-40834",
      "title": "Shortcuts: A shortcut may be able to bypass sensitive Shortcuts app settings",
      "component": "Shortcuts",
      "impact": "A shortcut may be able to bypass sensitive Shortcuts app settings",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 4.4,
      "epss": 0.00253,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-27872",
      "url": "https://patchblox.com/security/cve/CVE-2024-27872",
      "title": "Security Initialization: An app may be able to access protected user data",
      "component": "Security Initialization",
      "impact": "An app may be able to access protected user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00251,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40804",
      "url": "https://patchblox.com/security/cve/CVE-2024-40804",
      "title": "Accounts: A malicious application may be able to access private information",
      "component": "Accounts",
      "impact": "A malicious application may be able to access private information",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00247,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40816",
      "url": "https://patchblox.com/security/cve/CVE-2024-40816",
      "title": "Kernel: A local attacker may be able to cause unexpected system shutdown",
      "component": "Kernel",
      "impact": "A local attacker may be able to cause unexpected system shutdown",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00247,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-44141",
      "url": "https://patchblox.com/security/cve/CVE-2024-44141",
      "title": "DiskArbitration: A person with physical access to an unlocked Mac may be able to gain root code execution",
      "component": "DiskArbitration",
      "impact": "A person with physical access to an unlocked Mac may be able to gain root code execution",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.6,
      "epss": 0.00244,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40832",
      "url": "https://patchblox.com/security/cve/CVE-2024-40832",
      "title": "Messages: An app may be able to view a contact\u0027s phone number in system logs",
      "component": "Messages",
      "impact": "An app may be able to view a contact\u0027s phone number in system logs",
      "priority": "Routine",
      "severity": "LOW",
      "cvss": 3.3,
      "epss": 0.0024,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-27952",
      "url": "https://patchblox.com/security/cve/CVE-2023-27952",
      "title": "Safari: An app may bypass Gatekeeper checks",
      "component": "Safari",
      "impact": "An app may bypass Gatekeeper checks",
      "priority": "Routine",
      "epss": 0.00227,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-44205",
      "url": "https://patchblox.com/security/cve/CVE-2024-44205",
      "title": "Siri: A sandboxed app may be able to access sensitive user data in system logs",
      "component": "Siri",
      "impact": "A sandboxed app may be able to access sensitive user data in system logs",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00184,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40810",
      "url": "https://patchblox.com/security/cve/CVE-2024-40810",
      "title": "IOMobileFrameBuffer: An app may be able to cause a coprocessor crash",
      "component": "IOMobileFrameBuffer",
      "impact": "An app may be able to cause a coprocessor crash",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00171,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-09T07:25:28Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}