Vulnerabilities

TI-2023-22936 CVE-2023-42848 · GHSA-48j9-xh9v-wh6m

Heap-based buffer overflow in Apple iOS and iPadOS

LOW 35

The issue was addressed with improved bounds checks.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00212 Published 2024-02-21 Fixed in 16.7, 17.1 +3 CWE-122

TI-2023-22914 CVE-2023-42823 · GHSA-7279-4rvf-3vm5

Insecure storage of sensitive information in Apple iOS and iPadOS

LOW 25

The issue was resolved by sanitizing logging This issue is fixed in watchOS 10.1, macOS Sonoma 14.1, tvOS 17.1, macOS Monterey 12.7.1, iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1, macOS Ventura 13.6.1.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00457 Published 2024-02-21 Fixed in 16.7, 17.1 +4 CWE-922

TI-2023-22962 CVE-2023-42878 · GHSA-pvgw-2qh3-cj63

Insecure storage of sensitive information in Apple macOS

LOW 24

A privacy issue was addressed with improved private data redaction for log entries.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00191 Published 2024-02-21 Fixed in 14.1, 10.1 +1 CWE-922

TI-2023-22927 CVE-2023-42839 · GHSA-rj5v-wjwr-jxjq

Insecure storage of sensitive information in Apple tvOS

LOW 27

This issue was addressed with improved state management.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00201 Published 2024-02-21 Fixed in 17.1, 14.1 +1 CWE-922

TI-2023-23022 CVE-2023-42946 · GHSA-8g3f-2wpw-9j4h

Apple tvOS: An app may be able to leak sensitive user information

LOW 39

This issue was addressed with improved redaction of sensitive information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00472 Published 2024-02-21 Fixed in 17.1, 14.1 +1

TI-2023-22923 CVE-2023-42834 · GHSA-8wcv-54w6-5c6v

Apple macOS: An app may be able to access sensitive user data

LOW 27

A privacy issue was addressed with improved handling of files.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00218 Published 2024-02-21 Fixed in 13.6, 14.1 +3

TI-2023-23029 CVE-2023-42953 · GHSA-9rfw-9cwj-2c6f

Incorrect default permissions in Apple tvOS

LOW 24

A permissions issue was addressed with additional restrictions.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00172 Published 2024-02-21 Fixed in 17.1, 14.1 +1 CWE-276

TI-2023-23019 CVE-2023-42942 · GHSA-gqvf-8g7j-7gh5

Link following in Apple iOS and iPadOS

LOW 36

This issue was addressed with improved handling of symlinks.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00391 Published 2024-02-21 Fixed in 16.7, 17.1 +3 CWE-59

Vulnerabilities

Filters