Apple Product Line December 2024 Security Update Advisory

Dec 13 2024

Overview

An update has been released to address vulnerabilities in Apple Product Line. Users of the affected versions are advised to update to the latest version.

Affected Products

CVE-2024-54513

Apple Vision Pro versions: ~2.2 (excluded)
Apple TV HD and Apple TV 4K (all models) versions: ~18.2 (excluded)
Apple Watch Series 6 and at least versions: ~11.2 (excluded)
macOS Sequoia versions: ~15.2 (excluded)
iPhone XS or later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation or later, iPad Pro 11-inch 1st generation or later, iPad Air 3rd generation or later, iPad 7th generation or later, iPad mini 5th generation or later versions: ~18.2 (excluded)

CVE-2024-54486

Apple Vision Pro versions: ~2.2 (excluded)
Apple TV HD and Apple TV 4K (all models) versions: ~18.2 (excluded)
Apple Watch Series 6 and later versions at least: ~11.2 (excluded)
macOS Ventura versions: ~13.7.2 (excluded)
macOS Sonoma versions: ~14.7.2 (excluded)
macOS Sequoia versions: ~15.2 (excluded)
iPad Pro 12.9-inch 2nd generation, iPad Pro 10.5-inch, iPad 6th generations: ~17.7.3 (excluded)
iPhone XS or later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation or later, iPad Pro 11-inch 1st generation or later, iPad Air 3rd generation or later, iPad 7th generation or later, iPad mini 5th generation or later versions: ~18.2 (excluded)

CVE-2024-54500

Apple Vision Pro version: ~2.2 (excluded)
Apple TV HD and Apple TV 4K (all models) versions: ~18.2 (excluded)
Apple Watch Series 6 and later versions at least: ~11.2 (excluded)
macOS Ventura version: ~13.7.2 (excluded)
macOS Sonoma version: ~14.7.2 (excluded)
macOS Sequoia version: ~15.2 (excluded)
iPad Pro 12.9-inch 2nd generation, iPad Pro 10.5-inch, iPad 6th generation: ~17.7.3 (excluded)
iPhone XS or later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation or later, iPad Pro 11-inch 1st generation or later, iPad Air 3rd generation or later, iPad 7th generation or later, iPad mini 5th generation or later versions: ~18.2 (excluded)

CVE-2024-44245

Apple Vision Pro versions: ~2.2 (excluded)
macOS Sonoma versions: ~14.7.2 (excluded)
macOS Sequoia versions: ~15.2 (excluded)
iPad Pro 12.9-inch 2nd generation, iPad Pro 10.5-inch, iPad 6th generations: ~17.7.3 (excluded)
iPhone XS or later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation or later, iPad Pro 11-inch 1st generation or later, iPad Air 3rd generation or later, iPad 7th generation or later, iPad mini 5th generation or later versions: ~18.2 (excluded)

CVE-2024-54494

Apple Vision Pro versions: ~2.2 (excluded)
Apple TV HD and Apple TV 4K (all models) versions: ~18.2 (excluded)
Apple Watch Series 6 or later versions: ~11.2 (excluded)
macOS Ventura versions: ~13.7.2 (excluded)
macOS Sonoma versions: ~14.7.2 (excluded)
macOS Sequoia versions: ~15.2 (excluded)
iPad Pro 12.9-inch 2nd generation, iPad Pro 10.5-inch, iPad 6th generation versions: ~17.7.3 (excluded)
iPhone XS or later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation or later, iPad Pro 11-inch 1st generation or later, iPad Air 3rd generation or later, iPad 7th generation or later, iPad mini 5th generation or later versions: ~18.2 (excluded)

CVE-2024-45490

Apple Vision Pro versions: ~2.2 (excluded)
Apple TV HD and Apple TV 4K (all models) versions: ~18.2 (excluded)
Apple Watch Series 6 or later versions: ~11.2 (excluded)
macOS Ventura versions: ~13.7.2 (excluded)
macOS Sonoma versions: ~14.7.2 (excluded)
iPad Pro 12.9-inch 2nd generation, iPad Pro 10.5-inch, iPad 6th generation: ~17.7.3 (excluded)
iPhone XS or later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation or later, iPad Pro 11-inch 1st generation or later, iPad Air 3rd generation or later, iPad 7th generation or later, iPad mini 5th generation or later versions: ~18.2 (excluded)

CVE-2024-54492

Apple Vision Pro version: ~2.2 (excluded)
macOS Sequoia version: ~15.2 (excluded)
iPad Pro 12.9-inch 2nd generation, iPad Pro 10.5-inch, iPad 6th generation versions: ~17.7.3 (excluded)
iPhone XS or later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation or later, iPad Pro 11-inch 1st generation or later, iPad Air 3rd generation or later, iPad 7th generation or later, iPad mini 5th generation or later versions: ~18.2 (excluded)

CVE-2024-54501

Apple Vision Pro versions: ~2.2 (excluded)
Apple TV HD and Apple TV 4K (all models) versions: ~18.2 (excluded)
Apple Watch Series 6 or later versions: ~11.2 (excluded)
macOS Ventura versions: ~13.7.2 (excluded)
macOS Sonoma versions: ~14.7.2 (excluded)
iPad Pro 12.9-inch 2nd generation, iPad Pro 10.5-inch, iPad 6th generation versions: ~17.7.3 (excluded)
iPhone XS or later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation or later, iPad Pro 11-inch 1st generation or later, iPad Air 3rd generation or later, iPad 7th generation or later, iPad mini 5th generation or later versions: ~18.2 (excluded)

CVE-2024-54479

Apple Vision Pro versions: 2.2 (excluded)
Apple TV HD and Apple TV 4K (all models) versions: ~18.2 (excluded)
Apple Watch Series 6 and at least version: ~11.2 (excluded)
macOS Sequoia versions: ~15.2 (excluded)
iPad Pro 12.9-inch 2nd generation, iPad Pro 10.5-inch, iPad 6th generation versions: ~17.7.3 (excluded)
iPhone XS or later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation or later, iPad Pro 11-inch 1st generation or later, iPad Air 3rd generation or later, iPad 7th generation or later, iPad mini 5th generation or later versions: ~18.2 (excluded)

CVE-2024-54502

Apple Vision Pro versions: ~2.2 (excluded)
Apple TV HD and Apple TV 4K (all models) versions: ~18.2 (excluded)
Apple Watch Series 6 or later versions: ~11.2 (excluded)
macOS Sequoia versions: ~15.2 (excluded)
iPhone XS or later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation or later, iPad Pro 11-inch 1st generation or later, iPad Air 3rd generation or later, iPad 7th generation or later, iPad mini 5th generation or later versions: ~18.2 (excluded)

CVE-2024-54508

Apple Vision Pro versions: ~2.2 (excluded)
Apple TV HD and Apple TV 4K (all models) versions: ~18.2 excluded)
Apple Watch Series 6 or later versions: ~11.2 (excluded)
macOS Sequoia versions: ~15.2 (excluded)
iPhone XS or later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation or later, iPad Pro 11-inch 1st generation or later, iPad Air 3rd generation or later, iPad 7th generation or later, iPad mini 5th generation or later versions: ~18.2 (excluded)

CVE-2024-54505

Apple Vision Pro versions ~2.2 (excluded)
Apple TV HD and Apple TV 4K (all models) versions: ~18.2 (excluded)
Apple Watch Series 6 and at least version: ~11.2 (excluded)
macOS Sequoia version: ~15.2 (excluded)
iPad Pro 12.9-inch 2nd generation, iPad Pro 10.5-inch, iPad 6th generation: ~17.7.3 (excluded)
iPhone XS or later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation or later, iPad Pro 11-inch 1st generation or later, iPad Air 3rd generation or later, iPad 7th generation or later, iPad mini 5th generation or later versions: ~18.2 (excluded)

CVE-2024-54534

Apple Vision Pro version: ~2.2 (excluded)
Apple TV HD and Apple TV 4K (all models) versions: ~18.2 (excluded)
Apple Watch Series 6 or later versions: ~11.2 (excluded)
macOS Sequoia versions: ~15.2 (excluded)
iPhone XS or later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation or later, iPad Pro 11-inch 1st generation or later, iPad Air 3rd generation or later, iPad 7th generation or later, iPad mini 5th generation or later versions: ~18.2 (excluded)

CVE-2024-54526

Apple TV HD and Apple TV 4K (all models) versions: ~18.2 (excluded)
Apple Watch Series 6 or later versions: ~11.2 (excluded)
macOS Ventura versions: ~13.7.2 (excluded)
macOS Sonoma versions: ~14.7.2 (excluded)
macOS Sequoia versions: ~15.2 (excluded)
iPhone XS or later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation or later, iPad Pro 11-inch 1st generation or later, iPad Air 3rd generation or later, iPad 7th generation or later, iPad mini 5th generation or later versions: ~18.2 (excluded)

CVE-2024-54527

Apple TV HD and Apple TV 4K (all models) versions: ~18.2 (excluded)
Apple Watch Series 6 or later versions: ~11.2 (excluded)
macOS Ventura versions: ~13.7.2 (excluded)
macOS Sonoma versions: ~14.7.2 (excluded)
macOS Sequoia versions: ~15.2 (excluded)
iPhone XS or later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation or later, iPad Pro 11-inch 1st generation or later, iPad Air 3rd generation or later, iPad 7th generation or later, iPad mini 5th generation or later versions: ~18.2 (excluded)

CVE-2024-54510

Apple TV HD and Apple TV 4K (all models) versions: ~18.2 (excluded)
Apple Watch Series 6 or later versions: ~11.2 (excluded)
macOS Ventura versions: ~13.7.2 (excluded)
macOS Sonoma versions: ~14.7.2 (excluded)
macOS Sequoia versions: ~15.2 (excluded)
iPad Pro 12.9-inch 2nd generation, iPad Pro 10.5-inch, iPad 6th generation versions: ~17.7.3 (excluded)
iPhone XS or later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation or later, iPad Pro 11-inch 1st generation or later, iPad Air 3rd generation or later, iPad 7th generation or later, iPad mini 5th generation or later versions: ~18.2 (excluded)

CVE-2024-54514

Apple TV HD and Apple TV 4K (all models) versions: ~18.2 (excluded)
Apple Watch Series 6 or later versions: ~11.2 (excluded)
macOS Ventura versions: ~13.7.2 (excluded)
macOS Sonoma versions: ~14.7.2 (excluded)
macOS Sequoia versions: ~15.2 (excluded)
iPhone XS or later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation or later, iPad Pro 11-inch 1st generation or later, iPad Air 3rd generation or later, iPad 7th generation or later, iPad mini 5th generation or later versions: ~18.2 (excluded)

CVE-2024-44225

Apple TV HD and Apple TV 4K (all models) versions: ~18.2 (excluded)
Apple Watch Series 6 or later versions: ~11.2 (excluded)
macOS Ventura versions: ~13.7.2 (excluded)
macOS Sonoma versions: ~14.7.2 (excluded)
macOS Sequoia versions: ~15.2 (excluded)
iPad Pro 12.9-inch 2nd generation, iPad Pro 10.5-inch, iPad 6th generation versions: ~17.7.3 (excluded)
iPhone XS or later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation or later, iPad Pro 11-inch 1st generation or later, iPad Air 3rd generation or later, iPad 7th generation or later, iPad mini 5th generation or later versions: ~18.2 (excluded)

CVE-2024-54477

macOS Ventura versions: ~13.7.2 (excluded)
macOS Sonoma versions: ~14.7.2 (excluded)
macOS Sequoia versions: ~15.2 (excluded)

CVE-2024-54529

macOS Ventura versions: ~13.7.2 (excluded)
macOS Sonoma versions: ~14.7.2 (excluded)
macOS Sequoia versions: ~15.2 (excluded)

CVE-2024-44300

macOS Ventura versions: ~13.7.2 (excluded)
macOS Sonoma versions: ~14.7.2 (excluded)
macOS Sequoia versions: ~15.2 (excluded)

CVE-2024-54466

macOS Ventura versions: ~13.7.2 (excluded)
macOS Sonoma versions: ~14.7.2 (excluded)
macOS Sequoia versions: ~15.2 (excluded)

CVE-2024-54489

macOS Ventura versions: ~13.7.2 (excluded)
macOS Sonoma versions: ~14.7.2 (excluded)
macOS Sequoia versions: ~15.2 (excluded)

CVE-2024-44201

macOS Ventura versions: ~13.7.2 (excluded)
macOS Sonoma versions: ~14.7.2 (excluded)
iPad Pro 12.9-inch 2nd generation, iPad Pro 10.5-inch, iPad 6th generation versions: ~17.7.3 (excluded)

CVE-2024-54474

macOS Ventura versions: ~13.7.2 (excluded)
macOS Sonoma versions: ~14.7.2 (excluded)
macOS Sequoia versions: ~15.2 (excluded)

CVE-2024-54476

macOS Ventura versions: ~13.7.2 (excluded)
macOS Sonoma versions: ~14.7.2 (excluded)
macOS Sequoia versions: ~15.2 (excluded)

CVE-2024-44248

macOS Ventura versions: ~13.7.2 (excluded)
macOS Sonoma versions: ~14.7.2 (excluded)

CVE-2024-54528

macOS Ventura versions: ~13.7.2 (excluded)
macOS Sonoma versions: ~14.7.2 (excluded)
macOS Sequoia versions: ~15.2 (excluded)

CVE-2024-54498

macOS Ventura versions: ~13.7.2 (excluded)
macOS Sonoma versions: ~14.7.2 (excluded)
macOS Sequoia versions: ~15.2 (excluded)

CVE-2024-44291

macOS Ventura versions: ~13.7.2 (excluded)
macOS Sonoma versions: ~14.7.2 (excluded)
macOS Sequoia versions: ~15.2 (excluded)

CVE-2024-44224

macOS Ventura versions: ~13.7.2 (excluded)
macOS Sonoma versions: ~14.7.2 (excluded)
macOS Sequoia versions: ~15.2 (excluded)

CVE-2024-44220

macOS Sonoma versions: ~14.7.2 (excluded)
macOS Sequoia versions: ~15.2 (excluded)

CVE-2024-54495

macOS Sonoma versions: ~14.7.2 (Excluded)
macOS Sequoia versions: ~15.2 (excluded)

CVE-2024-54490

macOS Sequoia versions: ~15.2 (excluded)

CVE-2024-54506

macOS Sequoia versions: ~15.2 (excluded)

CVE-2024-54531

macOS Sequoia versions: ~15.2 (excluded)

CVE-2024-54465

macOS Sequoia versions: ~15.2 (excluded)

CVE-2024-54491

macOS Sequoia versions: ~15.2 (excluded)

CVE-2024-54484

macOS Sequoia versions: ~15.2 (excluded)

CVE-2024-54504

macOS Sequoia versions: ~15.2 (excluded)

CVE-2023-32395

macOS Sequoia versions: ~15.2 (excluded)

CVE-2024-44246

macOS Sequoia versions: ~15.2 (excluded)
iPad Pro 12.9-inch 2nd generation, iPad Pro 10.5-inch, iPad 6th generation versions: ~17.7.3 (excluded)
iPhone XS or later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation or later, iPad Pro 11-inch 1st generation or later, iPad Air 3rd generation or later, iPad 7th generation or later, iPad mini 5th generation or later versions: ~18.2 (excluded)

CVE-2024-54515

macOS Sequoia versions: ~15.2 (excluded)

CVE-2024-54524

macOS Sequoia versions: ~15.2 (excluded)

CVE-2024-54493

macOS Sequoia versions: ~15.2 (excluded)

CVE-2024-44243

macOS Sequoia version: ~15.2 (excluded)

CVE-2024-54485

iPad Pro 12.9-inch 2nd generation, iPad Pro 10.5-inch, iPad 6th generation versions: ~17.7.3 (excluded)
iPhone XS or later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation or later, iPad Pro 11-inch 1st generation or later, iPad Air 3rd generation or later, iPad 7th generation or later, iPad mini 5th generation or later versions: ~18.2 (excluded)

CVE-2024-54503

iPhone XS or later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation or later, iPad Pro 11-inch 1st generation or later, iPad Air 3rd generation or later, iPad 7th generation or later, iPad mini 5th generation or later versions: ~18.2 (excluded)

Resolved Vulnerabilities

Vulnerability that could allow an app to access sensitive user data (CVE-2024-54513)

Handling maliciously crafted fonts could disclose process memory (CVE-2024-54486)

Vulnerability where maliciously crafted image handling could disclose process memory (CVE-2024-54500)

An app could cause unexpected system shutdown or kernel memory corruption (CVE-2024-44245)

Vulnerability that could allow an attacker to create a writeable read-only memory mapping (CVE-2024-54494)

Vulnerability that could allow an attacker in a privileged network location to alter network traffic (CVE-2024-54492)

Vulnerability that could lead to a denial of service condition when handling maliciously crafted files (CVE-2024-54501)

Vulnerability where handling maliciously crafted web content could lead to an unexpected process crash (CVE-2024-54479)

Handling maliciously crafted web content could lead to an unexpected process crash (CVE-2024-54502)

Handling maliciously crafted web content could lead to an unexpected process crash (CVE-2024-54508)

Handling maliciously crafted web content could lead to memory corruption (CVE-2024-54505)

Vulnerability that could cause memory corruption when handling maliciously crafted web content (CVE-2024-54534)

Vulnerability that could allow malicious apps to access personal information (CVE-2024-54526)

Vulnerability that could allow an app to access sensitive user data (CVE-2024-54527)

Vulnerability that could allow an app to leak sensitive kernel state (CVE-2024-54510)

Vulnerability that could allow an app to escape the sandbox (CVE-2024-54514)

Vulnerability that could allow an app to escalate privileges (CVE-2024-44225)

Vulnerability that could allow an app to access user sensitive data (CVE-2024-54477)

Vulnerability that could allow an app to execute arbitrary code with kernel privileges (CVE-2024-54529)

Vulnerability where parsing a maliciously crafted video file could cause a system shutdown (CVE-2024-44220)

An encrypted volume can be accessed by another user without entering a password (CVE-2024-54466)

Vulnerability where the mount command could unexpectedly execute arbitrary code (CVE-2024-54489)

Vulnerability that could lead to a denial of service condition when handling maliciously crafted files (CVE-2024-44201)

Vulnerability that could allow an app to access sensitive user data (CVE-2024-54474)

Vulnerability that could allow an app to access sensitive user data (CVE-2024-54476)

Vulnerability that could allow a user with screen sharing access to view another user’s screen (CVE-2024-44248)

Vulnerability that could allow an app to overwrite arbitrary files (CVE-2024-54528)

Vulnerability that could allow an app to escape the sandbox (CVE-2024-54498)

Vulnerability that could allow a malicious app to gain root privileges (CVE-2024-44291)

Vulnerability that could allow a malicious app to gain root privileges (CVE-2024-44224)

Vulnerability that could allow maliciously crafted video files to be parsed, resulting in an unexpected system shutdown (CVE-2024-44220)

Vulnerability that could allow an app to modify protected parts of the file system (CVE-2024-54495)

Vulnerability that could allow a local attacker to access a user’s keychain entries (CVE-2024-54490)

Vulnerability that could allow an attacker to cause an unexpected system shutdown or arbitrary code execution in DCP firmware (CVE-2024-54506)

Vulnerability that could allow an app to bypass kASLR (CVE-2024-54531)

Vulnerability that could allow an app to escalate privileges (CVE-2024-54465)

Vulnerability that could allow a malicious application to determine a user’s current location (CVE-2024-54491)

Vulnerability that could allow an app to access sensitive user data (CVE-2024-54484)

Vulnerability that could allow an app to access sensitive user data (CVE-2024-54504)

Vulnerability that could allow an app to modify protected parts of the file system (CVE-2023-32395)

Adding a website to Safari reading list on devices with Private Relay enabled could expose the original IP address to the website (CVE-2024-44246)

Vulnerability that could allow a malicious app to gain root privileges (CVE-2024-54515)

Vulnerability that could allow a malicious app to access arbitrary files (CVE-2024-54524)

Privacy indicator for microphone access could be incorrectly displayed (CVE-2024-54493)

Vulnerability that could allow an app to modify protected parts of the file system (CVE-2024-44243)

Vulnerability that could allow an attacker with physical access to an iOS device to view notification content on the lock screen (CVE-2024-54485)

Vulnerability where muting a call while the phone is ringing may not activate mute (CVE-2024-54503)

Vulnerability Patches

Vulnerability Patches have been made available in the latest updates. Please follow the instructions on the Referenced Sites to update to the latest Vulnerability Patches version.