Vulnerabilities

TI-2023-21697 CVE-2023-41073 · GHSA-w774-m8r3-4p95

Apple iOS and iPadOS: An app may be able to access protected user data

LOW 25

An authorization issue was addressed with improved state management.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00364 Published 2023-09-26 Fixed in 17, 12.7 +4

TI-2023-21841 CVE-2023-41232 · GHSA-8f5c-hvhx-f7c6

Out-of-bounds read in Apple iOS and iPadOS

LOW 25

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00314 Published 2023-09-26 Fixed in 17, 12.7 +2 CWE-125

TI-2023-22366 CVE-2023-41984 · GHSA-w8j8-gh53-mg37

Code injection in Apple iOS and iPadOS

LOW 37

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00476 Published 2023-09-26 Fixed in 17, 12.7 +4 CWE-94

TI-2023-21272 CVE-2023-40454 · GHSA-6vqj-7ffg-x4hr

Apple iOS and iPadOS: An app may be able to delete files for which it does not have…

LOW 31

A permissions issue was addressed with additional restrictions.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00353 Published 2023-09-26 Fixed in 17, 12.7 +4

TI-2023-21222 CVE-2023-40403 · GHSA-j822-w26r-9cxf

Apple iOS and iPadOS: Processing web content may disclose sensitive information

LOW 32

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01327 Published 2023-09-26 Partial fix · 17, 12.7 +4

TI-2023-21214 CVE-2023-40395 · GHSA-cr7x-3cfq-v4qg

Apple iOS and iPadOS: An app may be able to access contacts

LOW 16

The issue was addressed with improved handling of caches.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.0033 Published 2023-09-26 Fixed in 17, 12.7 +3

TI-2023-21231 CVE-2023-40412 · GHSA-v883-r445-xw8x

Apple iOS and iPadOS: An app may be able to execute arbitrary code with kernel privileges

LOW 36

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0036 Published 2023-09-26 Fixed in 17, 12.7 +2

TI-2023-21270 CVE-2023-40452 · GHSA-xwfx-q77c-v4gg

Apple iOS and iPadOS: An app may be able to overwrite arbitrary files

LOW 31

The issue was addressed with improved bounds checks.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00353 Published 2023-09-26 Fixed in 17, 12.7 +3

TI-2023-21228 CVE-2023-40409 · GHSA-r9jr-jpgm-rcwh

Apple iOS and iPadOS: An app may be able to execute arbitrary code with kernel privileges

LOW 36

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0036 Published 2023-09-26 Fixed in 17, 12.7 +2

TI-2023-21229 CVE-2023-40410 · GHSA-2rv6-mjm4-w26j

Out-of-bounds read in Apple iOS and iPadOS

LOW 25

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00308 Published 2023-09-26 Fixed in 17, 12.7 +3 CWE-125

TI-2023-21225 CVE-2023-40406 · GHSA-w7gv-6gcq-gj2g

Apple macOS: An app may be able to read arbitrary files

LOW 25

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00293 Published 2023-09-26 Fixed in 12.7, 13.6 +1

TI-2023-21245 CVE-2023-40427 · GHSA-j4qv-qfhf-cx6c

Apple iOS and iPadOS: An app may be able to read sensitive location information

LOW 16

The issue was addressed with improved handling of caches.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00317 Published 2023-09-26 Fixed in 17, 12.7 +3

TI-2023-22351 CVE-2023-41968 · GHSA-f7p3-fcmr-gw5f

Link following in Apple iOS and iPadOS

LOW 25

This issue was addressed with improved validation of symlinks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00387 Published 2023-09-26 Fixed in 17, 12.7 +3 CWE-59

TI-2023-21238 CVE-2023-40420 · GHSA-r938-62rj-g37c

Apple iOS and iPadOS: Processing web content may lead to a denial-of-service

LOW 32

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01419 Published 2023-09-26 Fixed in 17, 12.7 +4

Vulnerabilities

Filters