Vulnerabilities

TI-2024-15325 CVE-2024-23218 · GHSA-f8vm-23j7-pf2r

Observable discrepancy in Apple iOS and iPadOS

LOW 28

A timing side-channel issue was addressed with improvements to constant-time computation in cryptographic functions.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00992 Published 2024-01-23 Fixed in 16.7.6, 17.3 +4 CWE-203

TI-2024-15322 CVE-2024-23215 · GHSA-qh5h-jvwg-m9xw

Apple iOS and iPadOS: An app may be able to access user-sensitive data

LOW 25

An issue was addressed with improved handling of temporary files.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00328 Published 2024-01-23 Fixed in 17.3, 14.3 +1

TI-2024-15329 CVE-2024-23223 · GHSA-wq93-576j-8q58

Incorrect permission assignment in Apple iOS and iPadOS

LOW 27

A privacy issue was addressed with improved handling of files.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00303 Published 2024-01-23 Fixed in 17.3, 14.3 +1 CWE-732

TI-2024-15311 CVE-2024-23204 · GHSA-hrvq-3565-fq43

Apple iOS and iPadOS: A shortcut may be able to use sensitive data with certain actions…

MEDIUM 42

The issue was addressed with additional permissions checks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01789 Published 2024-01-23 Fixed in 16.7.6, 17.3 +4

TI-2024-15319 CVE-2024-23212 · GHSA-qwm3-5pgj-28qh

Apple iOS and iPadOS: An app may be able to execute arbitrary code with kernel privileges

LOW 36

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00365 Published 2024-01-23 Fixed in 16.7.5, 17.3 +4

TI-2024-15315 CVE-2024-23208 · GHSA-r2mg-qw96-w89q

Code injection in Apple iOS and iPadOS

LOW 39

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01413 Published 2024-01-23 Fixed in 17.3, 14.3 +1 CWE-94

TI-2024-15320 CVE-2024-23213 · GHSA-3h6x-952r-xr8p

Memory corruption in Apple Safari

MEDIUM 43

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.015 Published 2024-01-23 Partial fix · 17.3, 16.7.5 +2 CWE-119

TI-2024-15317 CVE-2024-23210 · GHSA-h3x8-jx27-7vw4

Sensitive information in log files in Apple iOS and iPadOS

LOW 16

This issue was addressed with improved redaction of sensitive information.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00323 Published 2024-01-23 Fixed in 17.3, 14.3 +1 CWE-532

TI-2024-15313 CVE-2024-23206 · GHSA-73m5-j333-fcwc

Information disclosure in Apple Safari

LOW 31

An access issue was addressed with improved access restrictions.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00921 Published 2024-01-23 Partial fix · 17.3, 16.7.5 +2 CWE-200

TI-2024-15314 CVE-2024-23207 · GHSA-223p-3v7f-rwxh

Information disclosure in Apple iOS and iPadOS

LOW 25

This issue was addressed with improved redaction of sensitive information.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00338 Published 2024-01-23 Fixed in 17.3, 12.7.3 +3 CWE-200

TI-2024-15318 CVE-2024-23211 · GHSA-46g9-6366-qgqc

Apple Safari: A user's private browsing activity may be visible in Settings

LOW 16

A privacy issue was addressed with improved handling of user preferences.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.0038 Published 2024-01-23 Fixed in 17.3, 16.7.5 +2 CWE-359

TI-2024-15324 CVE-2024-23217 · GHSA-8g27-wpjg-5vv9

Insecure storage of sensitive information in Apple iOS and iPadOS

LOW 16

A privacy issue was addressed with improved handling of temporary files.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00382 Published 2024-01-23 Fixed in 17.3, 13.6.5 +2 CWE-922

Vulnerabilities

Filters