Vulnerabilities

TI-2023-23032 CVE-2023-42956 · GHSA-jprr-pf4r-gvp5

Apple Safari: Processing web content may lead to a denial-of-service

LOW 31

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00981 Published 2024-03-28 Partial fix · 17.2, 14.2

TI-2023-23013 CVE-2023-42936 · GHSA-jg48-xvhq-mrmw

LOW 30

This issue was addressed with improved redaction of sensitive information.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00216 Published 2024-03-28 Fixed in 17.2, 13.6 +3 CWE-200

TI-2023-23026 CVE-2023-42950 · GHSA-6cvp-282g-6jp8

MEDIUM 42

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01069 Published 2024-03-28 Partial fix · 17.2, 14.2 +1 CWE-416

TI-2023-23023 CVE-2023-42947 · GHSA-948m-5vcf-j8g5

LOW 39

A path handling issue was addressed with improved validation.

CVSS 3.1HIGH 8.6 Local No auth User interaction EPSS 0.00253 Published 2024-03-28 Fixed in 17.2, 13.6 +3 CWE-22

TI-2023-22976 CVE-2023-42896 · GHSA-xcwm-wrf2-369r

LOW 24

An issue was addressed with improved handling of temporary files.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00203 Published 2024-03-28 Fixed in 17.2, 16.7 +3 CWE-862

TI-2023-22974 CVE-2023-42893 · GHSA-qw7q-x9r6-v6fr

LOW 26

A permissions issue was addressed by removing vulnerable code and adding additional checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00262 Published 2024-03-28 Fixed in 17.2, 16.7 +4

TI-2023-23041 CVE-2023-42974 · GHSA-42pj-35w6-4jwg

LOW 32

A race condition was addressed with improved state handling.

CVSS 3.1HIGH 7.0 Local No auth User interaction EPSS 0.00148 Published 2024-03-28 Fixed in 17.2, 16.7 +3 CWE-362

TI-2023-23037 CVE-2023-42962 · GHSA-h64q-p2cr-jmw7

LOW 34

This issue was addressed with improved checks This issue is fixed in iOS 17.2 and iPadOS 17.2, iOS 16.7.3 and iPadOS 16.7.3.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00805 Published 2024-03-28 Fixed in 17.2, 16.7