Vulnerabilities

TI-2023-22972 CVE-2023-42891 · GHSA-3895-33gv-76p5

Apple macOS: An app may be able to monitor keystrokes without user permission

LOW 25

An authentication issue was addressed with improved state management.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00322 Published 2023-12-12 Fixed in 13.6, 12.7 +1

TI-2023-22981 CVE-2023-42901 · GHSA-qwwv-45j6-vvgp

Out-of-bounds write in Apple macOS

LOW 34

Multiple memory corruption issues were addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00311 Published 2023-12-12 Fixed in 14.2 CWE-787

TI-2023-22980 CVE-2023-42900 · GHSA-fxw9-g742-2frj

Apple macOS: An app may be able to access user-sensitive data

LOW 25

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00279 Published 2023-12-12 Fixed in 14.2

TI-2023-22967 CVE-2023-42886 · GHSA-343j-w4mx-wrqv

Out-of-bounds read in Apple macOS

LOW 34

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.003 Published 2023-12-12 Fixed in 13.6, 12.7 +1 CWE-125

TI-2023-22971 CVE-2023-42890 · GHSA-mw7v-292c-8697

Code injection in Apple Safari

MEDIUM 46

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.03208 Published 2023-12-12 Partial fix · 17.2, 14.2 +1 CWE-94

TI-2023-22958 CVE-2023-42874 · GHSA-vm53-jvj9-89qp

Apple macOS: Secure text fields may be displayed via the Accessibility Keyboard when…

LOW 12

This issue was addressed with improved state management.

CVSS 3.1LOW 2.4 Physical No auth No interaction EPSS 0.00327 Published 2023-12-12 Fixed in 14.2

TI-2023-22987 CVE-2023-42907 · GHSA-646g-mp5m-25x5

Out-of-bounds write in Apple macOS

LOW 34

Multiple memory corruption issues were addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00311 Published 2023-12-12 Fixed in 14.2 CWE-787

TI-2023-22991 CVE-2023-42911 · GHSA-whqw-j8vc-c3jq

Out-of-bounds write in Apple macOS

LOW 34

Multiple memory corruption issues were addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00311 Published 2023-12-12 Fixed in 14.2 CWE-787

TI-2023-22990 CVE-2023-42910 · GHSA-c2rf-qjqf-m3v7

Out-of-bounds write in Apple macOS

MEDIUM 40

Multiple memory corruption issues were addressed with improved input validation.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00945 Published 2023-12-12 Fixed in 14.2 CWE-787

TI-2023-22986 CVE-2023-42906 · GHSA-wr8p-76fm-xh64

Memory corruption in Apple macOS

LOW 39

Multiple memory corruption issues were addressed with improved input validation.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00758 Published 2023-12-12 Fixed in 14.2 CWE-119

TI-2023-23004 CVE-2023-42926 · GHSA-c2gx-6wc9-7gmj

Out-of-bounds write in Apple macOS

LOW 36

Multiple memory corruption issues were addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00331 Published 2023-12-12 Fixed in 14.2 CWE-787

TI-2023-22989 CVE-2023-42909 · GHSA-9pw6-c88r-wvh8

Out-of-bounds write in Apple macOS

LOW 36

Multiple memory corruption issues were addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00311 Published 2023-12-12 Fixed in 14.2 CWE-787

TI-2023-22979 CVE-2023-42899 · GHSA-wv6v-xw76-cc74

Apple iOS and iPadOS: Processing an image may lead to arbitrary code execution

LOW 34

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00432 Published 2023-12-12 Fixed in 17.2, 16.7 +4

TI-2023-22985 CVE-2023-42905 · GHSA-h7m9-9wcg-2642

Out-of-bounds write in Apple macOS

LOW 34

Multiple memory corruption issues were addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00311 Published 2023-12-12 Fixed in 14.2 CWE-787

TI-2023-22965 CVE-2023-42883 · GHSA-r8h5-fm59-g356

Apple Safari: Processing an image may lead to a denial-of-service

LOW 26

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00721 Published 2023-12-12 Partial fix · 17.2, 16.7 +2

TI-2023-22975 CVE-2023-42894 · GHSA-pf9w-g2rr-757q

Apple macOS: An app may be able to access information about a user's contacts

LOW 25

This issue was addressed with improved redaction of sensitive information.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00305 Published 2023-12-12 Fixed in 13.6, 12.7 +1

TI-2023-22964 CVE-2023-42882 · GHSA-8776-q38g-hwjm

Out-of-bounds write in Apple macOS

LOW 34

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0033 Published 2023-12-12 Fixed in 14.2 CWE-787

TI-2023-22984 CVE-2023-42904 · GHSA-554j-m4pq-rrhq

Out-of-bounds write in Apple macOS

LOW 34

Multiple memory corruption issues were addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00311 Published 2023-12-12 Fixed in 14.2 CWE-787

TI-2023-22992 CVE-2023-42912 · GHSA-78p4-q6hj-fmp7

Out-of-bounds write in Apple macOS

LOW 34

Multiple memory corruption issues were addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00311 Published 2023-12-12 Fixed in 14.2 CWE-787

TI-2023-23009 CVE-2023-42932 · GHSA-cf7h-9gmr-x446

Apple macOS: An app may be able to access protected user data

LOW 25

A logic issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00305 Published 2023-12-12 Fixed in 13.6, 12.7 +1

TI-2023-22978 CVE-2023-42898 · GHSA-pm5q-24x2-93gv

Apple iOS and iPadOS: Processing an image may lead to arbitrary code execution

LOW 25

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00478 Published 2023-12-12 Fixed in 17.2, 14.2 +1

TI-2023-23002 CVE-2023-42924 · GHSA-pj7m-8ccj-c5fv

Incorrect permission assignment in Apple macOS

LOW 24

A logic issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00256 Published 2023-12-12 Fixed in 13.6, 14.2 CWE-732

TI-2023-22988 CVE-2023-42908 · GHSA-j2vf-6x38-rqcw

Out-of-bounds write in Apple macOS

LOW 34

Multiple memory corruption issues were addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00311 Published 2023-12-12 Fixed in 14.2 CWE-787

TI-2023-22983 CVE-2023-42903 · GHSA-8qvf-f27p-9c7v

Out-of-bounds write in Apple macOS

LOW 36

Multiple memory corruption issues were addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00311 Published 2023-12-12 Fixed in 14.2 CWE-787

TI-2023-22998 CVE-2023-42919 · GHSA-9gqc-xrcf-jmcv

Apple iOS and iPadOS: An app may be able to access sensitive user data

LOW 25

A privacy issue was addressed with improved private data redaction for log entries.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00384 Published 2023-12-12 Fixed in 17.2, 16.7 +4

Vulnerabilities

Filters