Vulnerabilities

TI-2023-15729 CVE-2023-32443 · GHSA-m5f4-wpc8-674q

Out-of-bounds read in Apple macOS

LOW 36

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00699 Published 2023-07-27 Fixed in 13.5, 11.7 +1 CWE-125

TI-2023-19804 CVE-2023-38424 · GHSA-3v8c-v6fc-v3g6

Apple iOS and iPadOS: An app may be able to execute arbitrary code with kernel privileges

LOW 36

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00232 Published 2023-07-27 Fixed in 16.6, 13.5

TI-2023-19671 CVE-2023-38259 · GHSA-38rm-v4v3-vhx2

Apple macOS: An app may be able to access user-sensitive data

LOW 24

A logic issue was addressed with improved restrictions.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00245 Published 2023-07-27 Fixed in 13.5, 11.7 +1

TI-2023-15707 CVE-2023-32418 · GHSA-x8xh-32hp-4qvw

Code injection in Apple macOS

LOW 36

The issue was addressed with improved checks.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2023-07-27 Fixed in 13.5, 11.7 +1 CWE-94

TI-2023-19967 CVE-2023-38595 · GHSA-xf6p-jxqp-mvh4

Apple Safari: Processing web content may lead to arbitrary code execution

MEDIUM 41

The issue was addressed with improved checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01264 Published 2023-07-27 Partial fix · 16.6, 13.5 +1

TI-2023-19670 CVE-2023-38258 · GHSA-rr22-prvr-c5gh

Apple macOS: Processing a 3D model may result in disclosure of process memory

LOW 25

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00312 Published 2023-07-27 Fixed in 13.5, 12.6

TI-2023-19980 CVE-2023-38608 · GHSA-9g8h-c483-jx43

Apple macOS: An app may be able to access user-sensitive data

LOW 24

The issue was addressed with additional permissions checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.0021 Published 2023-07-27 Fixed in 13.5

TI-2023-19805 CVE-2023-38425 · GHSA-q7w8-fqjp-5rf5

Apple iOS and iPadOS: An app may be able to execute arbitrary code with kernel privileges

LOW 35

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00778 Published 2023-07-27 Fixed in 16.6, 13.5

TI-2023-15728 CVE-2023-32442 · GHSA-8236-vgrm-694j

Apple macOS: A shortcut may be able to modify sensitive Shortcuts app settings

LOW 24

An access issue was addressed with improved access restrictions.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.0022 Published 2023-07-27 Fixed in 13.5, 12.6

TI-2023-19975 CVE-2023-38603 · GHSA-cvvm-pvjp-7hfp

Apple iOS and iPadOS: A remote user may be able to cause a denial-of-service

MEDIUM 41

The issue was addressed with improved checks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01194 Published 2023-07-27 Fixed in 16.6, 13.5

TI-2023-15718 CVE-2023-32429 · GHSA-39h2-98ch-wh7c

Apple macOS: An app may be able to bypass Privacy preferences

LOW 24

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00244 Published 2023-07-27 Fixed in 13.5

TI-2023-19965 CVE-2023-38593 · GHSA-644f-mhxf-h2fr

Apple iOS and iPadOS: An app may be able to cause a denial-of-service

LOW 24

A logic issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00211 Published 2023-07-27 Fixed in 16.6, 13.5 +3

TI-2023-19974 CVE-2023-38602 · GHSA-h7v9-p38v-6rr9

Apple macOS: An app may be able to modify protected parts of the file system

LOW 24

A permissions issue was addressed with additional restrictions.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00219 Published 2023-07-27 Fixed in 13.5, 11.7 +1

TI-2023-19941 CVE-2023-38565 · GHSA-r7mr-872q-fr2m

Apple iOS and iPadOS: An app may be able to gain root privileges

LOW 35

A path handling issue was addressed with improved validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0022 Published 2023-07-27 Fixed in 16.6, 13.5 +3

TI-2023-19801 CVE-2023-38421 · GHSA-mg4h-hrr4-6xm8

Apple macOS: Processing a 3D model may result in disclosure of process memory

LOW 25

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00323 Published 2023-07-27 Fixed in 13.5, 12.6

TI-2023-19940 CVE-2023-38564 · GHSA-h7v3-h3m7-xv23

Apple macOS: An app may be able to modify protected parts of the file system

MEDIUM 40

The issue was addressed with improved checks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00539 Published 2023-07-27 Fixed in 13.5

TI-2023-18052 CVE-2023-35993 · GHSA-jc37-wf52-x7m4

Use after free in Apple tvOS

LOW 36

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00298 Published 2023-07-27 Fixed in 16.6, 13.5 +4 CWE-416

TI-2023-19947 CVE-2023-38572 · GHSA-qfg5-2446-wqxx

Apple Safari: A website may be able to bypass Same Origin Policy

LOW 35

The issue was addressed with improved checks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01168 Published 2023-07-27 Partial fix · 16.6, 13.5 +2

TI-2023-16000 CVE-2023-32734 · GHSA-w5w9-4cmf-97jp

Apple tvOS: An app may be able to execute arbitrary code with kernel privileges

LOW 36

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00251 Published 2023-07-27 Fixed in 16.6, 13.5 +1

TI-2023-15655 CVE-2023-32364 · GHSA-fxgx-w3p6-xmh8

Apple macOS: A sandboxed process may be able to circumvent sandbox restrictions

MEDIUM 41

A logic issue was addressed with improved restrictions.

CVSS 3.1HIGH 8.6 Local No auth User interaction EPSS 0.00832 Published 2023-07-27 Fixed in 13.5

TI-2023-19972 CVE-2023-38600 · GHSA-p785-479c-32q6

Apple Safari: Processing web content may lead to arbitrary code execution

MEDIUM 43

The issue was addressed with improved checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0143 Published 2023-07-27 Partial fix · 16.6, 13.5 +1

TI-2023-19672 CVE-2023-38261 · GHSA-2w9p-35fw-8hfr

Apple iOS and iPadOS: An app may be able to execute arbitrary code with kernel privileges

LOW 36

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0032 Published 2023-07-27 Fixed in 16.6, 13.5

TI-2023-15727 CVE-2023-32441 · GHSA-5gwg-7xvq-29hw

Apple tvOS: An app may be able to execute arbitrary code with kernel privileges

LOW 36

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00238 Published 2023-07-27 Fixed in 16.6, 13.5 +4

TI-2023-15705 CVE-2023-32416 · GHSA-vqm8-3p4q-rch7

Apple iOS and iPadOS: An app may be able to read sensitive location information

LOW 24

A logic issue was addressed with improved restrictions.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00234 Published 2023-07-27 Fixed in 16.6, 13.5 +3

TI-2023-19983 CVE-2023-38611 · GHSA-pxp9-4fx7-v479

Apple Safari: Processing web content may lead to arbitrary code execution

MEDIUM 41

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01264 Published 2023-07-27 Partial fix · 16.6, 13.5 +1

Vulnerabilities

Filters