cisa.gov | Bulletins
Follow
Vulnerability Summary for the Week of October 28, 2024
Multiple vulnerabilities have been identified in various software products, including Apple's iOS, iPadOS, macOS, and visionOS, as well as Autodesk's AutoCAD and other third-party applications. These vulnerabilities range from authentication bypass and unrestricted file upload to deserialization of untrusted data, use-after-free issues, and path deletion vulnerabilities. The Common Vulnerability Scoring System (CVSS) scores for these vulnerabilities vary, with some reaching as high as 10, indicating a critical severity level.The affected Apple products have been patched in recent updates, including iOS 18.1, iPadOS 18.1, macOS Ventura 13.7.1, and macOS Sonoma 14.7.1. Autodesk has also released patches for the identified vulnerabilities in AutoCAD. Users are advised to update their software to the latest versions to mitigate these vulnerabilities.In addition to Apple and Autodesk, other vendors have also been affected, including acnoo, adirectory, Ajar Productions, Amin Omer, amu02aftab, Andy Moyle, and Apache Software Foundation. The identified vulnerabilities in these products include authentication bypass, unrestricted file upload, and arbitrary shortcode execution.The CVSS scores for these vulnerabilities range from 7.1 to 10, indicating a moderate to critical severity level. Users are advised to update their software to the latest versions and follow best practices to mitigate these vulnerabilities.