Vulnerabilities

TI-2024-15360 CVE-2024-23255 · GHSA-7523-56gq-473q

Incorrect authorization in Apple iOS and iPadOS

MEDIUM 48

An authentication issue was addressed with improved state management.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00672 Published 2024-03-08 Fixed in 17.4, 14.4 CWE-863

TI-2024-15385 CVE-2024-23280 · GHSA-qc99-8rmf-q4mv

Injection in Apple Safari

LOW 35

An injection issue was addressed with improved validation.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.01276 Published 2024-03-08 Partial fix · 17.4, 14.4 +1 CWE-74

TI-2024-15402 CVE-2024-23297 · GHSA-ggwq-65m4-2gf3

Apple iOS and iPadOS: A malicious application may be able to access private information

LOW 25

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00281 Published 2024-03-08 Fixed in 17.4, 10.4

TI-2024-00233 CVE-2024-0258 · GHSA-mwm3-q3pf-fp7v

Improper access control in Apple iOS and iPadOS

MEDIUM 45

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.6 Local No auth User interaction EPSS 0.00265 Published 2024-03-08 Fixed in 17.4, 14.4 +1 CWE-284

TI-2024-15345 CVE-2024-23239 · GHSA-9v4g-5w22-xh84

Race condition in Apple iOS and iPadOS

LOW 27

A race condition was addressed with improved state handling.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.0043 Published 2024-03-08 Fixed in 17.4, 14.4 +1 CWE-362

TI-2024-15348 CVE-2024-23242 · GHSA-v2jv-c66v-hqhv

Sensitive information in log files in Apple iOS and iPadOS

LOW 15

A privacy issue was addressed by not logging contents of text fields.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00214 Published 2024-03-08 Fixed in 17.4, 14.4 CWE-532

TI-2024-15359 CVE-2024-23254 · GHSA-62qm-vc7f-rm93

Apple Safari: A malicious website may exfiltrate audio data cross-origin

LOW 31

The issue was addressed with improved UI handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01253 Published 2024-03-08 Partial fix · 17.4, 14.4 +2

TI-2024-15395 CVE-2024-23290 · GHSA-r72f-rmc7-whwp

Insecure storage of sensitive information in Apple iOS and iPadOS

LOW 25

A logic issue was addressed with improved restrictions.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00503 Published 2024-03-08 Fixed in 17.4, 14.4 +1 CWE-922

TI-2024-15378 CVE-2024-23273 · GHSA-qg9g-p9q2-wjvw

Improper certificate validation in Apple Safari

LOW 21

This issue was addressed through improved state management.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00732 Published 2024-03-08 Fixed in 17.4, 14.4 CWE-295

TI-2024-15396 CVE-2024-23291 · GHSA-c534-6v46-r777

Apple iOS and iPadOS: A malicious app may be able to observe user data in log entries…

MEDIUM 40

A privacy issue was addressed with improved private data redaction for log entries.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0063 Published 2024-03-08 Fixed in 17.4, 14.4 +1

TI-2024-15392 CVE-2024-23287 · GHSA-mq4f-242h-v9hj

Apple iOS and iPadOS: An app may be able to access user-sensitive data

LOW 30

A privacy issue was addressed with improved handling of temporary files.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00669 Published 2024-03-08 Fixed in 17.4, 14.4 +1 CWE-377

TI-2024-15312 CVE-2024-23205 · GHSA-f8q5-x5fj-x8wj

Insecure storage of sensitive information in Apple iOS and iPadOS

LOW 24

A privacy issue was addressed with improved private data redaction for log entries.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00218 Published 2024-03-08 Fixed in 17.4, 14.4 CWE-922

TI-2024-15397 CVE-2024-23292 · GHSA-4466-5jhm-q8x8

Information disclosure in Apple iOS and iPadOS

LOW 16

This issue was addressed with improved data protection.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00253 Published 2024-03-08 Fixed in 17.4, 14.4 CWE-200

TI-2024-15332 CVE-2024-23226 · GHSA-9hgh-cqm9-hh6h

Out-of-bounds write in Apple iOS and iPadOS

MEDIUM 42

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01188 Published 2024-03-08 Fixed in 17.4, 14.4 +2 CWE-787

TI-2024-15393 CVE-2024-23288 · GHSA-g3w4-gvhg-w64p

Apple iOS and iPadOS: An app may be able to elevate privileges

LOW 38

This issue was addressed by removing the vulnerable code.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00267 Published 2024-03-08 Fixed in 17.4, 14.4 +1 CWE-266

TI-2024-15375 CVE-2024-23270 · GHSA-4rxr-8xrx-9rf3

Out-of-bounds write in Apple iOS and iPadOS

LOW 36

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00277 Published 2024-03-08 Fixed in 17.4, 12.7.4 +2 CWE-787

TI-2024-15356 CVE-2024-23250 · GHSA-9whp-6cg8-4p5h

Incorrect authorization in Apple iOS and iPadOS

LOW 24

An access issue was addressed with improved access restrictions.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00236 Published 2024-03-08 Fixed in 17.4, 14.4 +1 CWE-863

TI-2024-15398 CVE-2024-23293 · GHSA-2vf8-hmhp-gw9x

Apple iOS and iPadOS: An attacker with physical access may be able to use Siri to access…

LOW 21

This issue was addressed through improved state management.

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.0041 Published 2024-03-08 Fixed in 17.4, 14.4 +1

TI-2024-15327 CVE-2024-23220 · GHSA-xqpf-pfm9-3p52

Apple iOS and iPadOS: An app may be able to fingerprint the user

LOW 24

The issue was addressed with improved handling of caches.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00235 Published 2024-03-08 Fixed in 17.4, 1.1

TI-2024-15382 CVE-2024-23277 · GHSA-j6q4-78q3-g22f

Apple iOS and iPadOS: An attacker in a privileged network position may be able to inject…

LOW 28

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00709 Published 2024-03-08 Fixed in 17.4, 14.4

TI-2024-15347 CVE-2024-23241 · GHSA-r944-7xp4-cg8q

Insecure storage of sensitive information in Apple iOS and iPadOS

LOW 29

This issue was addressed through improved state management.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00441 Published 2024-03-08 Fixed in 17.4, 14.4 CWE-922

TI-2024-15346 CVE-2024-23240 · GHSA-j333-97w2-3p5r

Apple iOS and iPadOS: Shake-to-undo may allow a deleted photo to be re-surfaced without…

LOW 12

The issue was addressed with improved checks.

CVSS 3.1LOW 2.4 Physical No auth No interaction EPSS 0.00255 Published 2024-03-08 Fixed in 17.4

Vulnerabilities

Filters