Vulnerabilities

TI-2023-23042 CVE-2023-42977 · GHSA-m6p7-g6ff-wxw5

Improper input validation in Apple iOS and iPadOS

LOW 35

A path handling issue was addressed with improved validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00206 Published 2025-04-11 Fixed in 17, 14 CWE-20

TI-2023-23036 CVE-2023-42961 · GHSA-cg4r-9g44-qvw4

LOW 28

A path handling issue was addressed with improved validation.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00452 Published 2025-04-11 Fixed in 17, 16.7 +3 CWE-22

TI-2023-23039 CVE-2023-42970 · GHSA-9v5v-qfv2-66qp

MEDIUM 41

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00571 Published 2025-04-11 Partial fix · 17, 14 +1 CWE-416

TI-2023-19985 CVE-2023-38614 · GHSA-5x97-hgxc-62pv

LOW 20

A permissions issue was addressed with additional restrictions.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00265 Published 2025-04-11 Fixed in 17, 14 CWE-269

TI-2023-22959 CVE-2023-42875 · GHSA-5892-jw8m-4684

LOW 35

Processing web content may lead to arbitrary code execution.

CVSS 3.1HIGH 7.3 Network Low privileges User interaction EPSS 0.00555 Published 2025-04-11 Partial fix · 17, 14 +1 CWE-94

TI-2023-23038 CVE-2023-42969 · GHSA-64h7-7273-jw5g

LOW 15

An app may be able to break out of its sandbox.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00171 Published 2025-04-11 Fixed in 17, 16.7 +3 CWE-284

TI-2023-23040 CVE-2023-42973 · GHSA-cmwf-4hcv-45rc

LOW 18

Private Browsing tabs may be accessed without authentication.

CVSS 3.1MEDIUM 4.0 Local No auth No interaction EPSS 0.00193 Published 2025-04-11 Fixed in 17 CWE-285