Vulnerabilities

TI-2023-21261 CVE-2023-40443 · GHSA-3729-fh52-2ph2

Apple iOS and iPadOS: An app may be able to gain root privileges

LOW 34

The issue was addressed with improved checks.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00287 Published 2023-09-26 Fixed in 17

TI-2023-15652 CVE-2023-32361 · GHSA-vvpw-85r2-wv37

Apple iOS and iPadOS: An app may be able to access user-sensitive data

LOW 25

The issue was addressed with improved handling of caches.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00301 Published 2023-09-26 Fixed in 17, 14 +1

TI-2023-21697 CVE-2023-41073 · GHSA-w774-m8r3-4p95

Apple iOS and iPadOS: An app may be able to access protected user data

LOW 25

An authorization issue was addressed with improved state management.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00364 Published 2023-09-26 Fixed in 17, 12.7 +4

TI-2023-21689 CVE-2023-41065 · GHSA-h68v-8qr7-q9j7

Apple iOS and iPadOS: An app may be able to read sensitive location information

LOW 16

A privacy issue was addressed with improved private data redaction for log entries.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00348 Published 2023-09-26 Fixed in 17, 14 +1

TI-2023-21252 CVE-2023-40434 · GHSA-pfmr-7m9x-5jwr

Apple iOS and iPadOS: An app may be able to access a user's Photos Library

LOW 16

A configuration issue was addressed with additional restrictions.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00298 Published 2023-09-26 Fixed in 17, 14

TI-2023-21841 CVE-2023-41232 · GHSA-8f5c-hvhx-f7c6

Out-of-bounds read in Apple iOS and iPadOS

LOW 25

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00314 Published 2023-09-26 Fixed in 17, 12.7 +2 CWE-125

TI-2023-21237 CVE-2023-40419 · GHSA-rw6r-jpf5-c58h

Apple iOS and iPadOS: An app may be able to gain elevated privileges

LOW 36

The issue was addressed with improved checks.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00299 Published 2023-09-26 Fixed in 17, 10

TI-2023-21218 CVE-2023-40399 · GHSA-xfcx-4xxp-5c2v

Apple iOS and iPadOS: An app may be able to disclose kernel memory

LOW 25

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00323 Published 2023-09-26 Fixed in 17, 14 +1

TI-2023-22366 CVE-2023-41984 · GHSA-w8j8-gh53-mg37

Code injection in Apple iOS and iPadOS

LOW 37

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00476 Published 2023-09-26 Fixed in 17, 12.7 +4 CWE-94

TI-2023-21692 CVE-2023-41068 · GHSA-3cvg-mp22-q8rc

Apple iOS and iPadOS: A user may be able to elevate privileges

LOW 36

An access issue was addressed with improved access restrictions.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00358 Published 2023-09-26 Fixed in 17, 16.7 +1

TI-2023-21272 CVE-2023-40454 · GHSA-6vqj-7ffg-x4hr

Apple iOS and iPadOS: An app may be able to delete files for which it does not have…

LOW 31

A permissions issue was addressed with additional restrictions.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00353 Published 2023-09-26 Fixed in 17, 12.7 +4

TI-2023-21222 CVE-2023-40403 · GHSA-j822-w26r-9cxf

Apple iOS and iPadOS: Processing web content may disclose sensitive information

LOW 32

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01327 Published 2023-09-26 Partial fix · 17, 12.7 +4

TI-2023-21214 CVE-2023-40395 · GHSA-cr7x-3cfq-v4qg

Apple iOS and iPadOS: An app may be able to access contacts

LOW 16

The issue was addressed with improved handling of caches.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.0033 Published 2023-09-26 Fixed in 17, 12.7 +3

TI-2023-21687 CVE-2023-41063 · GHSA-28mg-8v5c-567h

Apple iOS and iPadOS: An app may be able to execute arbitrary code with kernel privileges

LOW 36

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00391 Published 2023-09-26 Fixed in 17, 16.7 +2

TI-2023-21336 CVE-2023-40520 · GHSA-46j4-vxcj-whxf

Apple iOS and iPadOS: An app may be able to access edited photos saved to a temporary…

LOW 16

The issue was addressed with improved checks.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00297 Published 2023-09-26 Fixed in 17, 10

TI-2023-21250 CVE-2023-40432 · GHSA-6374-4823-w287

Apple iOS and iPadOS: An app may be able to execute arbitrary code with kernel privileges

LOW 36

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00347 Published 2023-09-26 Fixed in 17, 14 +1

TI-2023-21242 CVE-2023-40424 · GHSA-7hqp-mg76-qc4g

Apple iOS and iPadOS: An app may be able to access user-sensitive data

LOW 25

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00311 Published 2023-09-26 Fixed in 17, 14 +1

TI-2023-22376 CVE-2023-41995 · GHSA-8hr7-67mj-f566

Use after free in Apple iOS and iPadOS

LOW 34

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00305 Published 2023-09-26 Fixed in 17, 14 CWE-416

TI-2023-21204 CVE-2023-40384 · GHSA-x9w5-5hgv-7jm8

Apple iOS and iPadOS: An app may be able to read sensitive location information

LOW 16

A permissions issue was addressed with improved redaction of sensitive information.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.0031 Published 2023-09-26 Fixed in 17, 14

TI-2023-21231 CVE-2023-40412 · GHSA-v883-r445-xw8x

Apple iOS and iPadOS: An app may be able to execute arbitrary code with kernel privileges

LOW 36

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0036 Published 2023-09-26 Fixed in 17, 12.7 +2

TI-2023-18049 CVE-2023-35990 · GHSA-rvpg-jj9h-7jcw

Incorrect authorization in Apple iOS and iPadOS

LOW 16

The issue was addressed with improved checks.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00286 Published 2023-09-26 Fixed in 17, 16.7 +2 CWE-863

TI-2023-21246 CVE-2023-40428 · GHSA-cvpc-h7m3-c6q8

Apple iOS and iPadOS: An app may be able to access sensitive user data

LOW 25

The issue was addressed with improved handling of caches.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00305 Published 2023-09-26 Fixed in 17

TI-2023-21247 CVE-2023-40429 · GHSA-pfjg-2mfr-vf96

Apple iOS and iPadOS: An app may be able to access sensitive user data

LOW 26

A permissions issue was addressed with improved validation.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00579 Published 2023-09-26 Fixed in 17, 14 +1

TI-2023-20570 CVE-2023-39434 · GHSA-84c6-x9x8-7q38

Use after free in Apple iOS and iPadOS

MEDIUM 43

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0165 Published 2023-09-26 Partial fix · 17, 14 +1 CWE-416

TI-2023-21270 CVE-2023-40452 · GHSA-xwfx-q77c-v4gg

Apple iOS and iPadOS: An app may be able to overwrite arbitrary files

LOW 31

The issue was addressed with improved bounds checks.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00353 Published 2023-09-26 Fixed in 17, 12.7 +3

Vulnerabilities

Filters