Apple Vulnerabilities and Affected Products
Vulnerabilities associated with GarageBand.
Products
Clear product- macOS3,219 vulnerabilities
- iOS and iPadOS1,660 vulnerabilities
- watchOS1,278 vulnerabilities
- tvOS1,206 vulnerabilities
- visionOS554 vulnerabilities
- iOS511 vulnerabilities
- Safari465 vulnerabilities
- iTunes for Windows192 vulnerabilities
- iPadOS185 vulnerabilities
- iCloud for Windows181 vulnerabilities
- iCloud for Windows (Legacy)75 vulnerabilities
- iphone_os64 vulnerabilities
- ipad_os53 vulnerabilities
- Multiple Products53 vulnerabilities
- Security Update - Catalina43 vulnerabilities
- Xcode43 vulnerabilities
- iCloud for Windows (Microsoft Store)22 vulnerabilities
- mac_os14 vulnerabilities
- iOS, iPadOS, and macOS11 vulnerabilities
- ios_and_ipados11 vulnerabilities
- MacOS X10 vulnerabilities
- AirPort Base Station Firmware Update7 vulnerabilities
- Apple Music for Android7 vulnerabilities
- itunes5 vulnerabilities
- GarageBand4 vulnerabilities
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2024-44142HIGH | The issue was addressed with improved bounds checks. This issue is fixed in GarageBand 10.4.12. Processing a maliciously crafted image may lead to arbitrary code execution. Jan 30, 2025 | CVSS7.8v3.1 | EPSS0.318% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-42867HIGH | This issue was addressed with improved validation of the process entitlement and Team ID. This issue is fixed in GarageBand 10.4.9. An app may be able to gain root privileges. CWE-281Dec 20, 2024 | CVSS7.8v3.1 | EPSS0.211% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-23300HIGH | A use-after-free issue was addressed with improved memory management. This issue is fixed in GarageBand 10.4.11. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution. CWE-416Mar 12, 2024 | CVSS7.8v3.1 | EPSS0.265% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2021-30654MEDIUM | This issue was addressed by removing additional entitlements. This issue is fixed in GarageBand 10.4.3. A local attacker may be able to read sensitive information. Sep 8, 2021 | CVSS5.5v3.1 | EPSS0.248% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |