Vulnerabilities

TI-2023-21697 CVE-2023-41073 · GHSA-w774-m8r3-4p95

Apple iOS and iPadOS: An app may be able to access protected user data

LOW 25

An authorization issue was addressed with improved state management.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00364 Published 2023-09-26 Fixed in 17, 12.7 +4

TI-2023-21841 CVE-2023-41232 · GHSA-8f5c-hvhx-f7c6

Out-of-bounds read in Apple iOS and iPadOS

LOW 25

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00314 Published 2023-09-26 Fixed in 17, 12.7 +2 CWE-125

TI-2023-22366 CVE-2023-41984 · GHSA-w8j8-gh53-mg37

Code injection in Apple iOS and iPadOS

LOW 37

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00476 Published 2023-09-26 Fixed in 17, 12.7 +4 CWE-94

TI-2023-21272 CVE-2023-40454 · GHSA-6vqj-7ffg-x4hr

Apple iOS and iPadOS: An app may be able to delete files for which it does not have…

LOW 31

A permissions issue was addressed with additional restrictions.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00353 Published 2023-09-26 Fixed in 17, 12.7 +4

TI-2023-21222 CVE-2023-40403 · GHSA-j822-w26r-9cxf

Apple iOS and iPadOS: Processing web content may disclose sensitive information

LOW 32

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01327 Published 2023-09-26 Partial fix · 17, 12.7 +4

TI-2023-21687 CVE-2023-41063 · GHSA-28mg-8v5c-567h

Apple iOS and iPadOS: An app may be able to execute arbitrary code with kernel privileges

LOW 36

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00391 Published 2023-09-26 Fixed in 17, 16.7 +2

TI-2023-21231 CVE-2023-40412 · GHSA-v883-r445-xw8x

Apple iOS and iPadOS: An app may be able to execute arbitrary code with kernel privileges

LOW 36

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0036 Published 2023-09-26 Fixed in 17, 12.7 +2

TI-2023-21270 CVE-2023-40452 · GHSA-xwfx-q77c-v4gg

Apple iOS and iPadOS: An app may be able to overwrite arbitrary files

LOW 31

The issue was addressed with improved bounds checks.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00353 Published 2023-09-26 Fixed in 17, 12.7 +3

TI-2023-21228 CVE-2023-40409 · GHSA-r9jr-jpgm-rcwh

Apple iOS and iPadOS: An app may be able to execute arbitrary code with kernel privileges

LOW 36

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0036 Published 2023-09-26 Fixed in 17, 12.7 +2

TI-2023-21229 CVE-2023-40410 · GHSA-2rv6-mjm4-w26j

Out-of-bounds read in Apple iOS and iPadOS

LOW 25

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00308 Published 2023-09-26 Fixed in 17, 12.7 +3 CWE-125

TI-2023-22363 CVE-2023-41981 · GHSA-5f2c-86wv-pg43

Apple iOS and iPadOS: An attacker that has already achieved kernel code execution may be…

LOW 21

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.00393 Published 2023-09-26 Fixed in 17, 16.7 +3

TI-2023-21225 CVE-2023-40406 · GHSA-w7gv-6gcq-gj2g

Apple macOS: An app may be able to read arbitrary files

LOW 25

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00293 Published 2023-09-26 Fixed in 12.7, 13.6 +1

TI-2023-22377 CVE-2023-41996 · GHSA-6q78-g84j-5xvg

Apple macOS: Apps that fail verification checks may still launch

LOW 25

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00291 Published 2023-09-26 Fixed in 13.6

TI-2023-21245 CVE-2023-40427 · GHSA-j4qv-qfhf-cx6c

Apple iOS and iPadOS: An app may be able to read sensitive location information

LOW 16

The issue was addressed with improved handling of caches.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00317 Published 2023-09-26 Fixed in 17, 12.7 +3

TI-2023-22351 CVE-2023-41968 · GHSA-f7p3-fcmr-gw5f

Link following in Apple iOS and iPadOS

LOW 25

This issue was addressed with improved validation of symlinks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00387 Published 2023-09-26 Fixed in 17, 12.7 +3 CWE-59

TI-2023-21238 CVE-2023-40420 · GHSA-r938-62rj-g37c

Apple iOS and iPadOS: Processing web content may lead to a denial-of-service

LOW 32

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01419 Published 2023-09-26 Fixed in 17, 12.7 +4

TI-2023-21695 CVE-2023-41071 · GHSA-hwwf-m48r-hf96

Use after free in Apple iOS and iPadOS

LOW 36

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00366 Published 2023-09-26 Fixed in 17, 13.6 +1 CWE-416

TI-2023-21694 CVE-2023-41070 · GHSA-2x59-x82p-xm32

Apple iOS and iPadOS: An app may be able to access sensitive data logged when a user…

LOW 25

A logic issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00355 Published 2023-09-26 Fixed in 17, 16.7 +3

Vulnerabilities

Filters