Vulnerabilities

TI-2023-22971 CVE-2023-42890 · GHSA-mw7v-292c-8697

Code injection in Apple Safari

MEDIUM 46

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.03208 Published 2023-12-12 Partial fix · 17.2, 14.2 +1 CWE-94

TI-2023-22977 CVE-2023-42897 · GHSA-264w-p3vv-mx7p

Apple iOS and iPadOS: An attacker with physical access may be able to use Siri to access…

LOW 21

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00348 Published 2023-12-12 Fixed in 17.2

TI-2023-22979 CVE-2023-42899 · GHSA-wv6v-xw76-cc74

Apple iOS and iPadOS: Processing an image may lead to arbitrary code execution

LOW 34

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00432 Published 2023-12-12 Fixed in 17.2, 16.7 +4

TI-2023-22965 CVE-2023-42883 · GHSA-r8h5-fm59-g356

Apple Safari: Processing an image may lead to a denial-of-service

LOW 26

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00721 Published 2023-12-12 Partial fix · 17.2, 16.7 +2

TI-2023-22978 CVE-2023-42898 · GHSA-pm5q-24x2-93gv

Apple iOS and iPadOS: Processing an image may lead to arbitrary code execution

LOW 25

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00478 Published 2023-12-12 Fixed in 17.2, 14.2 +1

TI-2023-22998 CVE-2023-42919 · GHSA-9gqc-xrcf-jmcv

Apple iOS and iPadOS: An app may be able to access sensitive user data

LOW 25

A privacy issue was addressed with improved private data redaction for log entries.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00384 Published 2023-12-12 Fixed in 17.2, 16.7 +4

TI-2023-23001 CVE-2023-42923 · GHSA-g2j3-6xhv-8fxf

Apple iOS and iPadOS: Private Browsing tabs may be accessed without authentication

LOW 25

This issue was addressed through improved state management.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00674 Published 2023-12-12 Fixed in 17.2

TI-2023-23000 CVE-2023-42922 · GHSA-vrg7-4cjp-whcv

Apple iOS and iPadOS: An app may be able to read sensitive location information

LOW 25

This issue was addressed with improved redaction of sensitive information.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00335 Published 2023-12-12 Fixed in 17.2, 16.7 +3

TI-2023-22966 CVE-2023-42884 · GHSA-8qpf-hj9q-p3rg

Information disclosure in Apple iOS and iPadOS

LOW 27

This issue was addressed with improved redaction of sensitive information.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00354 Published 2023-12-12 Fixed in 17.2, 16.7 +2 CWE-200

TI-2023-22994 CVE-2023-42914 · GHSA-cc3v-c5j9-63p5

Apple iOS and iPadOS: An app may be able to break out of its sandbox

LOW 29

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.3 Local No auth User interaction EPSS 0.0061 Published 2023-12-12 Fixed in 17.2, 16.7 +4

Vulnerabilities

Filters