{
  "fix": "Sequoia 15.2",
  "url": "https://patchblox.com/security/fix/macos/sequoia-15.2",
  "summary": "Sequoia 15.2, released December 11, 2024, fixes 77 CVEs in Sequoia. None of them is reported as exploited. Patch Radar priority: Urgent.",
  "platform": "macos",
  "type": "os-version",
  "title": "Sequoia 15.2",
  "released": "2024-12-11T00:00:00Z",
  "priority": "Urgent",
  "priorityTier": 2,
  "priorityReason": "Closes CVE-2024-45490, rated Critical",
  "supported": true,
  "cveCount": 77,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.0406,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://support.apple.com/en-us/121839",
  "appliesTo": [
    {
      "product": "Sequoia",
      "productUrl": "https://patchblox.com/security/product/macos/sequoia",
      "fixedVersion": "15.2",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2024-45490",
      "url": "https://patchblox.com/security/cve/CVE-2024-45490",
      "title": "libexpat: A remote attacker may cause an unexpected app termination or arbitrary code execution",
      "component": "libexpat",
      "impact": "A remote attacker may cause an unexpected app termination or arbitrary code execution",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.01686,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54507",
      "url": "https://patchblox.com/security/cve/CVE-2024-54507",
      "title": "Kernel: An attacker with user privileges may be able to read kernel memory",
      "component": "Kernel",
      "impact": "An attacker with user privileges may be able to read kernel memory",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.1,
      "epss": 0.0089,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54492",
      "url": "https://patchblox.com/security/cve/CVE-2024-54492",
      "title": "Passwords: An attacker in a privileged network position may be able to alter network traffic",
      "component": "Passwords",
      "impact": "An attacker in a privileged network position may be able to alter network traffic",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00879,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54542",
      "url": "https://patchblox.com/security/cve/CVE-2024-54542",
      "title": "Safari Private Browsing: Private Browsing tabs may be accessed without authentication",
      "component": "Safari Private Browsing",
      "impact": "Private Browsing tabs may be accessed without authentication",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.1,
      "epss": 0.00721,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54506",
      "url": "https://patchblox.com/security/cve/CVE-2024-54506",
      "title": "IOMobileFrameBuffer: An attacker may be able to cause unexpected system termination or arbitrary code execution in DCP firmware",
      "component": "IOMobileFrameBuffer",
      "impact": "An attacker may be able to cause unexpected system termination or arbitrary code execution in DCP firmware",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00695,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54530",
      "url": "https://patchblox.com/security/cve/CVE-2024-54530",
      "title": "Passkeys: Password autofill may fill in passwords after failing authentication",
      "component": "Passkeys",
      "impact": "Password autofill may fill in passwords after failing authentication",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.1,
      "epss": 0.00575,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-31486",
      "url": "https://patchblox.com/security/cve/CVE-2023-31486",
      "title": "Perl: Multiple issues in Perl",
      "component": "Perl",
      "impact": "Multiple issues in Perl",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.1,
      "epss": 0.01742,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54479",
      "url": "https://patchblox.com/security/cve/CVE-2024-54479",
      "title": "WebKit: Processing maliciously crafted web content may lead to an unexpected process crash",
      "component": "WebKit",
      "impact": "Processing maliciously crafted web content may lead to an unexpected process crash",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.5,
      "epss": 0.01585,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-31484",
      "url": "https://patchblox.com/security/cve/CVE-2023-31484",
      "title": "Perl: Multiple issues in Perl",
      "component": "Perl",
      "impact": "Multiple issues in Perl",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.1,
      "epss": 0.01548,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54498",
      "url": "https://patchblox.com/security/cve/CVE-2024-54498",
      "title": "SharedFileList: An app may be able to break out of its sandbox",
      "component": "SharedFileList",
      "impact": "An app may be able to break out of its sandbox",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.8,
      "epss": 0.01125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54505",
      "url": "https://patchblox.com/security/cve/CVE-2024-54505",
      "title": "WebKit: Processing maliciously crafted web content may lead to memory corruption",
      "component": "WebKit",
      "impact": "Processing maliciously crafted web content may lead to memory corruption",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.8,
      "epss": 0.0107,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54534",
      "url": "https://patchblox.com/security/cve/CVE-2024-54534",
      "title": "WebKit: Processing maliciously crafted web content may lead to memory corruption",
      "component": "WebKit",
      "impact": "Processing maliciously crafted web content may lead to memory corruption",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 9.8,
      "epss": 0.01045,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54508",
      "url": "https://patchblox.com/security/cve/CVE-2024-54508",
      "title": "WebKit: Processing maliciously crafted web content may lead to an unexpected process crash",
      "component": "WebKit",
      "impact": "Processing maliciously crafted web content may lead to an unexpected process crash",
      "priority": "High",
      "severity": "MEDIUM",
      "cvss": 7.5,
      "epss": 0.00967,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54533",
      "url": "https://patchblox.com/security/cve/CVE-2024-54533",
      "title": "Spotlight: An app may be able to access sensitive user data",
      "component": "Spotlight",
      "impact": "An app may be able to access sensitive user data",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7,
      "epss": 0.00736,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54499",
      "url": "https://patchblox.com/security/cve/CVE-2024-54499",
      "title": "ImageIO: Processing a maliciously crafted image may lead to arbitrary code execution",
      "component": "ImageIO",
      "impact": "Processing a maliciously crafted image may lead to arbitrary code execution",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.1,
      "epss": 0.00627,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54465",
      "url": "https://patchblox.com/security/cve/CVE-2024-54465",
      "title": "LaunchServices: An app may be able to elevate privileges",
      "component": "LaunchServices",
      "impact": "An app may be able to elevate privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.4,
      "epss": 0.00622,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54525",
      "url": "https://patchblox.com/security/cve/CVE-2024-54525",
      "title": "MobileBackup: Restoring a maliciously crafted backup file may lead to modification of protected system files",
      "component": "MobileBackup",
      "impact": "Restoring a maliciously crafted backup file may lead to modification of protected system files",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.8,
      "epss": 0.00617,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54557",
      "url": "https://patchblox.com/security/cve/CVE-2024-54557",
      "title": "SharedFileList: An attacker may gain access to protected parts of the file system",
      "component": "SharedFileList",
      "impact": "An attacker may gain access to protected parts of the file system",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.5,
      "epss": 0.00525,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54529",
      "url": "https://patchblox.com/security/cve/CVE-2024-54529",
      "title": "Audio: An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges",
      "component": "Audio",
      "impact": "An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.0033,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-44225",
      "url": "https://patchblox.com/security/cve/CVE-2024-44225",
      "title": "libxpc: An app may be able to gain elevated privileges",
      "component": "libxpc",
      "impact": "An app may be able to gain elevated privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00306,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-44291",
      "url": "https://patchblox.com/security/cve/CVE-2024-44291",
      "title": "Foundation: A malicious app may be able to gain root privileges",
      "component": "Foundation",
      "impact": "A malicious app may be able to gain root privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00297,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-44245",
      "url": "https://patchblox.com/security/cve/CVE-2024-44245",
      "title": "Kernel: An app may be able to cause unexpected system termination or corrupt kernel memory",
      "component": "Kernel",
      "impact": "An app may be able to cause unexpected system termination or corrupt kernel memory",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.1,
      "epss": 0.00295,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54509",
      "url": "https://patchblox.com/security/cve/CVE-2024-54509",
      "title": "ASP TCP: An app may be able to cause unexpected system termination or write kernel memory",
      "component": "ASP TCP",
      "impact": "An app may be able to cause unexpected system termination or write kernel memory",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00266,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-44224",
      "url": "https://patchblox.com/security/cve/CVE-2024-44224",
      "title": "StorageKit: A malicious app may be able to gain root privileges",
      "component": "StorageKit",
      "impact": "A malicious app may be able to gain root privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00252,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54514",
      "url": "https://patchblox.com/security/cve/CVE-2024-54514",
      "title": "libxpc: An app may be able to break out of its sandbox",
      "component": "libxpc",
      "impact": "An app may be able to break out of its sandbox",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.2,
      "epss": 0.00251,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54517",
      "url": "https://patchblox.com/security/cve/CVE-2024-54517",
      "title": "IOMobileFrameBuffer: An app may be able to corrupt coprocessor memory",
      "component": "IOMobileFrameBuffer",
      "impact": "An app may be able to corrupt coprocessor memory",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00243,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54528",
      "url": "https://patchblox.com/security/cve/CVE-2024-54528",
      "title": "SharedFileList: An app may be able to overwrite arbitrary files",
      "component": "SharedFileList",
      "impact": "An app may be able to overwrite arbitrary files",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.1,
      "epss": 0.00227,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54515",
      "url": "https://patchblox.com/security/cve/CVE-2024-54515",
      "title": "SharedFileList: A malicious app may be able to gain root privileges",
      "component": "SharedFileList",
      "impact": "A malicious app may be able to gain root privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00214,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54537",
      "url": "https://patchblox.com/security/cve/CVE-2024-54537",
      "title": "QuickTime Player: An app may be able to read and write files outside of its sandbox",
      "component": "QuickTime Player",
      "impact": "An app may be able to read and write files outside of its sandbox",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.1,
      "epss": 0.00201,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54468",
      "url": "https://patchblox.com/security/cve/CVE-2024-54468",
      "title": "Kernel: An app may be able to break out of its sandbox",
      "component": "Kernel",
      "impact": "An app may be able to break out of its sandbox",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.2,
      "epss": 0.00199,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2016-1246",
      "url": "https://patchblox.com/security/cve/CVE-2016-1246",
      "title": "Perl: Multiple issues in Perl",
      "component": "Perl",
      "impact": "Multiple issues in Perl",
      "priority": "Routine",
      "epss": 0.0406,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54526",
      "url": "https://patchblox.com/security/cve/CVE-2024-54526",
      "title": "AppleMobileFileIntegrity: A malicious app may be able to access private information",
      "component": "AppleMobileFileIntegrity",
      "impact": "A malicious app may be able to access private information",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.03385,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54486",
      "url": "https://patchblox.com/security/cve/CVE-2024-54486",
      "title": "FontParser: Processing a maliciously crafted font may result in the disclosure of process memory",
      "component": "FontParser",
      "impact": "Processing a maliciously crafted font may result in the disclosure of process memory",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.5,
      "epss": 0.01361,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-44246",
      "url": "https://patchblox.com/security/cve/CVE-2024-44246",
      "title": "Safari: On a device with Private Relay enabled, adding a website to the Safari Reading List may reveal the originating IP address to the website",
      "component": "Safari",
      "impact": "On a device with Private Relay enabled, adding a website to the Safari Reading List may reveal the originating IP address to the website",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 4.3,
      "epss": 0.01121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54497",
      "url": "https://patchblox.com/security/cve/CVE-2024-54497",
      "title": "QuartzCore: Processing web content may lead to a denial-of-service",
      "component": "QuartzCore",
      "impact": "Processing web content may lead to a denial-of-service",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.5,
      "epss": 0.01017,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54494",
      "url": "https://patchblox.com/security/cve/CVE-2024-54494",
      "title": "Kernel: An attacker may be able to create a read-only memory mapping that can be written to",
      "component": "Kernel",
      "impact": "An attacker may be able to create a read-only memory mapping that can be written to",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.9,
      "epss": 0.00763,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54466",
      "url": "https://patchblox.com/security/cve/CVE-2024-54466",
      "title": "DiskArbitration: An encrypted volume may be accessed by a different user without prompting for the password",
      "component": "DiskArbitration",
      "impact": "An encrypted volume may be accessed by a different user without prompting for the password",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.5,
      "epss": 0.00713,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-40864",
      "url": "https://patchblox.com/security/cve/CVE-2024-40864",
      "title": "Apple Account: An attacker in a privileged network position may be able to track a user\u0027s activity",
      "component": "Apple Account",
      "impact": "An attacker in a privileged network position may be able to track a user\u0027s activity",
      "priority": "Routine",
      "severity": "LOW",
      "cvss": 2.7,
      "epss": 0.00653,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54478",
      "url": "https://patchblox.com/security/cve/CVE-2024-54478",
      "title": "ICU: Processing maliciously crafted web content may lead to an unexpected process crash",
      "component": "ICU",
      "impact": "Processing maliciously crafted web content may lead to an unexpected process crash",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.5,
      "epss": 0.00627,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-44243",
      "url": "https://patchblox.com/security/cve/CVE-2024-44243",
      "title": "StorageKit: An app may be able to modify protected parts of the file system",
      "component": "StorageKit",
      "impact": "An app may be able to modify protected parts of the file system",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00608,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-44220",
      "url": "https://patchblox.com/security/cve/CVE-2024-44220",
      "title": "AppleGraphicsControl: Parsing a maliciously crafted video file may lead to unexpected system termination",
      "component": "AppleGraphicsControl",
      "impact": "Parsing a maliciously crafted video file may lead to unexpected system termination",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.5,
      "epss": 0.00596,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54488",
      "url": "https://patchblox.com/security/cve/CVE-2024-54488",
      "title": "Accounts: Photos in the Hidden Photos Album may be viewed without authentication",
      "component": "Accounts",
      "impact": "Photos in the Hidden Photos Album may be viewed without authentication",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.3,
      "epss": 0.00518,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54489",
      "url": "https://patchblox.com/security/cve/CVE-2024-54489",
      "title": "Disk Utility: Running a mount command may unexpectedly execute arbitrary code",
      "component": "Disk Utility",
      "impact": "Running a mount command may unexpectedly execute arbitrary code",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.3,
      "epss": 0.00371,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54500",
      "url": "https://patchblox.com/security/cve/CVE-2024-54500",
      "title": "ImageIO: Processing a maliciously crafted image may result in disclosure of process memory",
      "component": "ImageIO",
      "impact": "Processing a maliciously crafted image may result in disclosure of process memory",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00315,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54501",
      "url": "https://patchblox.com/security/cve/CVE-2024-54501",
      "title": "SceneKit: Processing a maliciously crafted file may lead to a denial of service",
      "component": "SceneKit",
      "impact": "Processing a maliciously crafted file may lead to a denial of service",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00314,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-45306",
      "url": "https://patchblox.com/security/cve/CVE-2024-45306",
      "title": "Vim: Processing a maliciously crafted file may lead to heap corruption",
      "component": "Vim",
      "impact": "Processing a maliciously crafted file may lead to heap corruption",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.003,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54485",
      "url": "https://patchblox.com/security/cve/CVE-2024-54485",
      "title": "VoiceOver: An attacker with physical access to an iOS device may be able to view notification content from the lock screen",
      "component": "VoiceOver",
      "impact": "An attacker with physical access to an iOS device may be able to view notification content from the lock screen",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00286,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-44300",
      "url": "https://patchblox.com/security/cve/CVE-2024-44300",
      "title": "Crash Reporter: An app may be able to access protected user data",
      "component": "Crash Reporter",
      "impact": "An app may be able to access protected user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.0028,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54527",
      "url": "https://patchblox.com/security/cve/CVE-2024-54527",
      "title": "AppleMobileFileIntegrity: An app may be able to access sensitive user data",
      "component": "AppleMobileFileIntegrity",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.0028,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54474",
      "url": "https://patchblox.com/security/cve/CVE-2024-54474",
      "title": "PackageKit: An app may be able to access user-sensitive data",
      "component": "PackageKit",
      "impact": "An app may be able to access user-sensitive data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00279,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54477",
      "url": "https://patchblox.com/security/cve/CVE-2024-54477",
      "title": "Apple Software Restore: An app may be able to access user-sensitive data",
      "component": "Apple Software Restore",
      "impact": "An app may be able to access user-sensitive data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54495",
      "url": "https://patchblox.com/security/cve/CVE-2024-54495",
      "title": "Swift: An app may be able to modify protected parts of the file system",
      "component": "Swift",
      "impact": "An app may be able to modify protected parts of the file system",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.0027,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-32395",
      "url": "https://patchblox.com/security/cve/CVE-2023-32395",
      "title": "Perl: An app may be able to modify protected parts of the file system",
      "component": "Perl",
      "impact": "An app may be able to modify protected parts of the file system",
      "priority": "Routine",
      "epss": 0.00261,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54513",
      "url": "https://patchblox.com/security/cve/CVE-2024-54513",
      "title": "Crash Reporter: An app may be able to access sensitive user data",
      "component": "Crash Reporter",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.7,
      "epss": 0.00259,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54524",
      "url": "https://patchblox.com/security/cve/CVE-2024-54524",
      "title": "SharedFileList: A malicious app may be able to access arbitrary files",
      "component": "SharedFileList",
      "impact": "A malicious app may be able to access arbitrary files",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.0024,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54568",
      "url": "https://patchblox.com/security/cve/CVE-2024-54568",
      "title": "ATS: Parsing a maliciously crafted file may lead to an unexpected app termination",
      "component": "ATS",
      "impact": "Parsing a maliciously crafted file may lead to an unexpected app termination",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 4.3,
      "epss": 0.00232,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54520",
      "url": "https://patchblox.com/security/cve/CVE-2024-54520",
      "title": "System Settings: An app may be able to overwrite arbitrary files",
      "component": "System Settings",
      "impact": "An app may be able to overwrite arbitrary files",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00229,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54491",
      "url": "https://patchblox.com/security/cve/CVE-2024-54491",
      "title": "Logging: A malicious application may be able to determine a user\u0027s current location",
      "component": "Logging",
      "impact": "A malicious application may be able to determine a user\u0027s current location",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00225,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54484",
      "url": "https://patchblox.com/security/cve/CVE-2024-54484",
      "title": "MediaRemote: An app may be able to access user-sensitive data",
      "component": "MediaRemote",
      "impact": "An app may be able to access user-sensitive data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00223,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54531",
      "url": "https://patchblox.com/security/cve/CVE-2024-54531",
      "title": "Kernel: An app may be able to bypass kASLR",
      "component": "Kernel",
      "impact": "An app may be able to bypass kASLR",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00218,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54493",
      "url": "https://patchblox.com/security/cve/CVE-2024-54493",
      "title": "Shortcuts: Privacy indicators for microphone access may be attributed incorrectly",
      "component": "Shortcuts",
      "impact": "Privacy indicators for microphone access may be attributed incorrectly",
      "priority": "Routine",
      "severity": "LOW",
      "cvss": 3.3,
      "epss": 0.00218,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54547",
      "url": "https://patchblox.com/security/cve/CVE-2024-54547",
      "title": "Dock: An app may be able to access protected user data",
      "component": "Dock",
      "impact": "An app may be able to access protected user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.0021,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54504",
      "url": "https://patchblox.com/security/cve/CVE-2024-54504",
      "title": "Notification Center: An app may be able to access user-sensitive data",
      "component": "Notification Center",
      "impact": "An app may be able to access user-sensitive data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00208,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54541",
      "url": "https://patchblox.com/security/cve/CVE-2024-54541",
      "title": "APFS: An app may be able to access user-sensitive data",
      "component": "APFS",
      "impact": "An app may be able to access user-sensitive data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00205,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54539",
      "url": "https://patchblox.com/security/cve/CVE-2024-54539",
      "title": "WindowServer: An app may be able to capture keyboard events from the lock screen",
      "component": "WindowServer",
      "impact": "An app may be able to capture keyboard events from the lock screen",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00201,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54519",
      "url": "https://patchblox.com/security/cve/CVE-2024-54519",
      "title": "Find My: An app may be able to read sensitive location information",
      "component": "Find My",
      "impact": "An app may be able to read sensitive location information",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00199,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54510",
      "url": "https://patchblox.com/security/cve/CVE-2024-54510",
      "title": "Kernel: An app may be able to leak sensitive kernel state",
      "component": "Kernel",
      "impact": "An app may be able to leak sensitive kernel state",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.1,
      "epss": 0.00198,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54475",
      "url": "https://patchblox.com/security/cve/CVE-2024-54475",
      "title": "System Settings: An app may be able to determine a user\u2019s current location",
      "component": "System Settings",
      "impact": "An app may be able to determine a user\u2019s current location",
      "priority": "Routine",
      "severity": "LOW",
      "cvss": 3.3,
      "epss": 0.00197,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54549",
      "url": "https://patchblox.com/security/cve/CVE-2024-54549",
      "title": "Sync Services: An app may be able to access user-sensitive data",
      "component": "Sync Services",
      "impact": "An app may be able to access user-sensitive data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00192,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54536",
      "url": "https://patchblox.com/security/cve/CVE-2024-54536",
      "title": "MobileAccessoryUpdater: An app may be able to edit NVRAM variables",
      "component": "MobileAccessoryUpdater",
      "impact": "An app may be able to edit NVRAM variables",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00189,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54550",
      "url": "https://patchblox.com/security/cve/CVE-2024-54550",
      "title": "Contacts: An app may be able to view autocompleted contact information from Messages and Mail in system logs",
      "component": "Contacts",
      "impact": "An app may be able to view autocompleted contact information from Messages and Mail in system logs",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 4,
      "epss": 0.00186,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54565",
      "url": "https://patchblox.com/security/cve/CVE-2024-54565",
      "title": "XProtect: An app may be able to access sensitive user data",
      "component": "XProtect",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.2,
      "epss": 0.00174,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54559",
      "url": "https://patchblox.com/security/cve/CVE-2024-54559",
      "title": "Sandbox: An app may be able to access sensitive user data",
      "component": "Sandbox",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00174,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54516",
      "url": "https://patchblox.com/security/cve/CVE-2024-54516",
      "title": "SharedFileList: An app may be able to approve a launch daemon without user consent",
      "component": "SharedFileList",
      "impact": "An app may be able to approve a launch daemon without user consent",
      "priority": "Routine",
      "severity": "LOW",
      "cvss": 3.3,
      "epss": 0.00157,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-54490",
      "url": "https://patchblox.com/security/cve/CVE-2024-54490",
      "title": "AppleMobileFileIntegrity: A local attacker may gain access to user\u0027s Keychain items",
      "component": "AppleMobileFileIntegrity",
      "impact": "A local attacker may gain access to user\u0027s Keychain items",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00144,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-44271",
      "url": "https://patchblox.com/security/cve/CVE-2024-44271",
      "title": "Control Center: An app may be able to record the screen without an indicator",
      "component": "Control Center",
      "impact": "An app may be able to record the screen without an indicator",
      "priority": "Routine",
      "severity": "LOW",
      "cvss": 3.3,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-47100",
      "url": "https://patchblox.com/security/cve/CVE-2023-47100",
      "title": "Perl: Multiple issues in Perl",
      "component": "Perl",
      "impact": "Multiple issues in Perl",
      "priority": "Routine",
      "severity": "moderate",
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-07T18:46:35Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}