Priority LOW 24
This issue was addressed by improving Face ID anti-spoofing models.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00186 · Published 2024-01-10 · Fixed in 17 CWE-290
Priority MEDIUM 45
A use-after-free issue was addressed with improved memory management.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01151 · Published 2024-01-10 · Partial fix · 17, 14 +1 CWE-416
Priority LOW 24
The issue was addressed with additional permissions checks.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00213 · Published 2024-01-10 · Fixed in 17, 14
Priority MEDIUM 42
A correctness issue was addressed with improved checks.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00993 · Published 2024-01-10 · Partial fix · 17, 14 CWE-94
Priority LOW 15
The issue was addressed with improved checks.
CVSS 3.1LOW 3.3· Local · No auth · User interaction · EPSS 0.00212 · Published 2024-01-10 · Fixed in 17, 12.7 +3
Priority LOW 30
This issue was addressed by removing the vulnerable code.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00774 · Published 2024-01-10 · Fixed in 17, 14 CWE-200
Priority MEDIUM 40
An authentication issue was addressed with improved state management.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00703 · Published 2024-01-10 · Fixed in 17, 14 CWE-306
Priority CRITICAL 93KEV
A use-after-free issue was addressed with improved memory management.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01955 · Published 2024-01-10 · Fixed in 17, 15.8.7 CWE-416
Priority MEDIUM 49
A type confusion issue was addressed with improved checks.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01266 · Published 2024-01-10 · Fixed in 17, 14 CWE-843
Priority LOW 35
A use-after-free issue was addressed with improved memory management.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00216 · Published 2024-01-10 · Fixed in 17, 14 CWE-416
Priority LOW 19
An information disclosure issue was addressed by removing the vulnerable code.
CVSS 3.1MEDIUM 4.2· Local · High privileges · User interaction · EPSS 0.00215 · Published 2024-01-10 · Fixed in 17, 14 CWE-200
Priority LOW 35
The issue was addressed with improved memory handling.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00222 · Published 2024-01-10 · Fixed in 17, 14 CWE-787
Priority LOW 31
A memory corruption issue was addressed by removing the vulnerable code.
CVSS 3.1HIGH 7.1· Local · No auth · User interaction · EPSS 0.00218 · Published 2024-01-10 · Fixed in 17, 14 CWE-787
Priority LOW 12
This issue was addressed with improved redaction of sensitive information.
CVSS 3.1LOW 2.4· Physical · No auth · No interaction · EPSS 0.00237 · Published 2024-01-10 · Fixed in 17