Vulnerabilities

TI-2023-22932 CVE-2023-42844 · GHSA-2jcp-64q4-69c4

Link following in Apple macOS

MEDIUM 42

This issue was addressed with improved handling of symlinks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01729 Published 2023-10-25 Fixed in 14.1, 13.6 +1 CWE-59

TI-2023-21241 CVE-2023-40423 · GHSA-c483-xw4j-pmcm

Memory corruption in Apple iOS and iPadOS

LOW 36

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00418 Published 2023-10-25 Fixed in 16.7, 14.1 +3 CWE-119

TI-2023-22937 CVE-2023-42849 · GHSA-4fc2-j39p-mv7v

Memory corruption in Apple iOS and iPadOS

LOW 32

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01544 Published 2023-10-25 Fixed in 16.7, 14.1 +4 CWE-119

TI-2023-21267 CVE-2023-40449 · GHSA-22x6-c42f-8q7h

Memory corruption in Apple iOS and iPadOS

LOW 25

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00333 Published 2023-10-25 Fixed in 16.7, 14.1 +3 CWE-119

TI-2023-21860 CVE-2023-41254 · GHSA-mxqf-9j3w-rv3f

Sensitive information in log files in Apple iOS and iPadOS

LOW 25

A privacy issue was addressed with improved private data redaction for log entries.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00334 Published 2023-10-25 Fixed in 16.7, 14.1 +3 CWE-532

TI-2023-22941 CVE-2023-42854 · GHSA-6w99-p6vc-wh73

Apple macOS: An app may be able to cause a denial-of-service to Endpoint Security clients

LOW 25

This issue was addressed by removing the vulnerable code.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00349 Published 2023-10-25 Fixed in 14.1, 13.6 +1

TI-2023-21232 CVE-2023-40413 · GHSA-7j5q-8x2v-mrhw

Apple iOS and iPadOS: An app may be able to read sensitive location information

LOW 25

The issue was addressed with improved handling of caches.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00389 Published 2023-10-25 Fixed in 16.7, 14.1 +4

TI-2023-21701 CVE-2023-41077 · GHSA-5p7g-qx77-8f6h

Incorrect authorization in Apple macOS

LOW 25

An app may be able to access protected user data.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00311 Published 2023-10-25 Fixed in 14, 13.6 CWE-863

TI-2023-22943 CVE-2023-42856 · GHSA-x9v9-7hfr-q9g4

Memory corruption in Apple macOS

LOW 36

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00407 Published 2023-10-25 Fixed in 14.1, 13.6 +1 CWE-119

TI-2023-22929 CVE-2023-42841 · GHSA-w3ff-vvc7-jg8f

Memory corruption in Apple iOS and iPadOS

LOW 36

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00345 Published 2023-10-25 Fixed in 16.7, 14.1 +2 CWE-119

TI-2023-22358 CVE-2023-41975 · GHSA-7379-vgf5-fcwc

Apple macOS: A website may be able to access the microphone without the microphone use…

LOW 22

This issue was addressed by removing the vulnerable code.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.01129 Published 2023-10-25 Fixed in 14.1, 13.6 +1

TI-2023-21234 CVE-2023-40416 · GHSA-hp7g-968m-74c4

Memory corruption in Apple iOS and iPadOS

LOW 32

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01468 Published 2023-10-25 Fixed in 16.7, 14.1 +3 CWE-119

TI-2023-21239 CVE-2023-40421 · GHSA-wp7x-2348-v58r

Apple macOS: An app may be able to access sensitive user data

LOW 25

A permissions issue was addressed with additional restrictions.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00365 Published 2023-10-25 Fixed in 14.1, 13.6 +1

TI-2023-21220 CVE-2023-40401 · GHSA-468w-3r6j-mchw

Missing authentication in Apple macOS

LOW 35

The issue was addressed with additional permissions checks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01226 Published 2023-10-25 Fixed in 13.6 CWE-306

Vulnerabilities

Filters