Vulnerabilities

TI-2023-09363 CVE-2023-23531 · GHSA-9hmh-gm6c-7vpr

Out-of-bounds write in Apple iOS and iPadOS

MEDIUM 43

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.6 Local No auth User interaction EPSS 0.01751 Published 2023-02-27 Fixed in 16.3, 13.2 CWE-787

TI-2023-09362 CVE-2023-23530 · GHSA-j39f-9gf7-grgg

Apple iOS and iPadOS: An app may be able to execute arbitrary code out of its sandbox or…

LOW 39

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.6 Local No auth User interaction EPSS 0.00278 Published 2023-02-27 Fixed in 16.3, 13.2

TI-2023-09361 CVE-2023-23529 · GHSA-c5hw-5p2j-xqg7

Type confusion in Apple iOS and iPadOS

CRITICAL 97KEV

A type confusion issue was addressed with improved checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.09426 Published 2023-02-27 Partial fix · 16.3, 13.2 +1 CWE-843

TI-2023-09356 CVE-2023-23524 · GHSA-r596-4r66-j5v5

Uncontrolled resource consumption in Apple iOS and iPadOS

LOW 34

A denial-of-service issue was addressed with improved input validation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.006 Published 2023-02-27 Fixed in 16.3, 9.3 +1 CWE-400

TI-2023-09353 CVE-2023-23520 · GHSA-p22w-hm7x-wwfc

Time-of-check time-of-use race condition in Apple iOS and iPadOS

LOW 28

A race condition was addressed with additional validation.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00807 Published 2023-02-27 Fixed in 16.3, 13.2 +1 CWE-367

TI-2023-09352 CVE-2023-23519 · GHSA-fr85-4pwv-vvc4

Out-of-bounds write in Apple iOS and iPadOS

MEDIUM 41

A memory corruption issue was addressed with improved state management.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00939 Published 2023-02-27 Fixed in 16.3, 13.2 +1 CWE-787

TI-2023-09351 CVE-2023-23518 · GHSA-9cf9-qjr8-c7jw

Out-of-bounds write in Apple iOS and iPadOS

MEDIUM 42

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00902 Published 2023-02-27 Partial fix · 16.3, 11.7 +3 CWE-787

TI-2023-09350 CVE-2023-23517 · GHSA-vjc5-4hxh-h2rw

Memory corruption in Apple iOS and iPadOS

MEDIUM 42

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00902 Published 2023-02-27 Partial fix · 16.3, 11.7 +3 CWE-119

TI-2023-09348 CVE-2023-23514 · GHSA-pcmg-p58j-hf4w

Use after free in Apple macOS

LOW 37

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00719 Published 2023-02-27 Fixed in 13.3, 12.6 +3 CWE-416

TI-2023-09346 CVE-2023-23512 · GHSA-2wr8-x7wx-q9hc

Apple iOS and iPadOS: Visiting a website may lead to an app denial-of-service

LOW 30

The issue was addressed with improved handling of caches.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00704 Published 2023-02-27 Fixed in 16.3, 13.2 +1

TI-2023-09345 CVE-2023-23511 · GHSA-v456-32f4-4fp2

Information disclosure in Apple iOS and iPadOS

LOW 24

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.0023 Published 2023-02-27 Fixed in 16.3, 13.2 +2 CWE-200

TI-2023-09340 CVE-2023-23505 · GHSA-9f7j-84q4-6vj2

Sensitive information in log files in Apple iOS and iPadOS

LOW 15

A privacy issue was addressed with improved private data redaction for log entries.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00229 Published 2023-02-27 Fixed in 16.3, 11.7 +4 CWE-532

TI-2023-09339 CVE-2023-23504 · GHSA-pmjr-wmch-77wm

Out-of-bounds write in Apple iOS and iPadOS

LOW 36

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00353 Published 2023-02-27 Fixed in 16.3, 15.7 +3 CWE-787

TI-2023-09338 CVE-2023-23503 · GHSA-h8qq-2m4g-fp6f

Authentication bypass in Apple iOS and iPadOS

LOW 24

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00218 Published 2023-02-27 Fixed in 16.3, 15.7 +2 CWE-288

TI-2023-09337 CVE-2023-23502 · GHSA-4948-rc3p-cvv8

Out-of-bounds read in Apple iOS and iPadOS

LOW 24

An information disclosure issue was addressed by removing the vulnerable code.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00238 Published 2023-02-27 Fixed in 16.3, 13.2 +2 CWE-125

TI-2023-09335 CVE-2023-23500 · GHSA-pvfc-f4g9-hh2w

Information disclosure in Apple iOS and iPadOS

LOW 24

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00234 Published 2023-02-27 Fixed in 16.3, 15.7 +2 CWE-200

TI-2023-09334 CVE-2023-23499 · GHSA-rpq9-9pj8-fx9v

Information disclosure in Apple iOS and iPadOS

LOW 25

This issue was addressed by enabling hardened runtime.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00383 Published 2023-02-27 Fixed in 16.3, 11.7 +3 CWE-200

TI-2023-09333 CVE-2023-23498 · GHSA-59mr-vp8c-2fgm

Apple iOS and iPadOS: The quoted original message may be selected from the wrong email…

LOW 16

A logic issue was addressed with improved state management.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00233 Published 2023-02-27 Fixed in 16.3, 15.7 +1

TI-2023-09331 CVE-2023-23496 · GHSA-grxj-g635-2wcv

Code injection in Apple iOS and iPadOS

MEDIUM 42

The issue was addressed with improved checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0089 Published 2023-02-27 Fixed in 16.3, 15.7 +2 CWE-94

Vulnerabilities

Filters