~/products/apple/visionos2.1

pipeline liveDigest Docs

Apple Visionos2.1 vulnerabilities

26 known vulnerabilities affecting apple/visionos2.1.

Total CVEs

26

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH7MEDIUM19

Vulnerabilities

Page 2 of 2

CVE-2024-44302MEDIUMCVSS 5.52024-10-28

CVE-2024-44302 [MEDIUM] CVE-2024-44302: visionOS2.1 Apple Security Update: About the security content of visionOS2.1 Product: visionOS2.1 CVE: CVE-2024-44302 Component: CoreText Impact: Processing a maliciously crafted font may result in the disclosure of process memory Description: The issue was addressed with improved checks.

CVE-2024-44232MEDIUMCVSS 5.52024-10-28

CVE-2024-44232 [MEDIUM] CVE-2024-44232: visionOS2.1 Apple Security Update: About the security content of visionOS2.1 Product: visionOS2.1 CVE: CVE-2024-44232 Component: AppleAVD Impact: Parsing a maliciously crafted video file may lead to unexpected system termination Description: The issue was addressed with improved bounds checks.

CVE-2024-44282MEDIUMCVSS 5.52024-10-28

CVE-2024-44282 [MEDIUM] CVE-2024-44282: visionOS2.1 Apple Security Update: About the security content of visionOS2.1 Product: visionOS2.1 CVE: CVE-2024-44282 Component: Foundation Impact: Parsing a file may lead to disclosure of user information Description: An out-of-bounds read was addressed with improved input validation.

CVE-2024-44244MEDIUMCVSS 4.32024-10-28

CVE-2024-44244 [MEDIUM] CVE-2024-44244: visionOS2.1 Apple Security Update: About the security content of visionOS2.1 Product: visionOS2.1 CVE: CVE-2024-44244 Component: WebKit Impact: Processing maliciously crafted web content may lead to an unexpected process crash Description: A memory corruption issue was addressed with improved input validation.

CVE-2024-44215MEDIUMCVSS 5.52024-10-28

CVE-2024-44215 [MEDIUM] CVE-2024-44215: visionOS2.1 Apple Security Update: About the security content of visionOS2.1 Product: visionOS2.1 CVE: CVE-2024-44215 Component: ImageIO Impact: Processing an image may result in disclosure of process memory Description: This issue was addressed with improved checks.

CVE-2024-44278MEDIUMCVSS 5.52024-10-28

CVE-2024-44278 [MEDIUM] CVE-2024-44278: visionOS2.1 Apple Security Update: About the security content of visionOS2.1 Product: visionOS2.1 CVE: CVE-2024-44278 Component: Siri Impact: A sandboxed app may be able to access sensitive user data in system logs Description: An information disclosure issue was addressed with improved private data redaction for log entries.

← Previous2 / 2