Vulnerabilities

TI-2023-22932 CVE-2023-42844 · GHSA-2jcp-64q4-69c4

Link following in Apple macOS

MEDIUM 42

This issue was addressed with improved handling of symlinks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01729 Published 2023-10-25 Fixed in 14.1, 13.6 +1 CWE-59

TI-2023-21241 CVE-2023-40423 · GHSA-c483-xw4j-pmcm

Memory corruption in Apple iOS and iPadOS

LOW 36

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00418 Published 2023-10-25 Fixed in 16.7, 14.1 +3 CWE-119

TI-2023-22937 CVE-2023-42849 · GHSA-4fc2-j39p-mv7v

Memory corruption in Apple iOS and iPadOS

LOW 32

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01544 Published 2023-10-25 Fixed in 16.7, 14.1 +4 CWE-119

TI-2023-21267 CVE-2023-40449 · GHSA-22x6-c42f-8q7h

Memory corruption in Apple iOS and iPadOS

LOW 25

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00333 Published 2023-10-25 Fixed in 16.7, 14.1 +3 CWE-119

TI-2023-22941 CVE-2023-42854 · GHSA-6w99-p6vc-wh73

Apple macOS: An app may be able to cause a denial-of-service to Endpoint Security clients

LOW 25

This issue was addressed by removing the vulnerable code.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00349 Published 2023-10-25 Fixed in 14.1, 13.6 +1

TI-2023-21232 CVE-2023-40413 · GHSA-7j5q-8x2v-mrhw

Apple iOS and iPadOS: An app may be able to read sensitive location information

LOW 25

The issue was addressed with improved handling of caches.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00389 Published 2023-10-25 Fixed in 16.7, 14.1 +4

TI-2023-21243 CVE-2023-40425 · GHSA-g5vf-92m7-vh6w

Sensitive information in log files in Apple macOS

LOW 20

A privacy issue was addressed with improved private data redaction for log entries.

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.00327 Published 2023-10-25 Fixed in 14, 12.7 CWE-532

TI-2023-22943 CVE-2023-42856 · GHSA-x9v9-7hfr-q9g4

Memory corruption in Apple macOS

LOW 36

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00407 Published 2023-10-25 Fixed in 14.1, 13.6 +1 CWE-119

TI-2023-22358 CVE-2023-41975 · GHSA-7379-vgf5-fcwc

Apple macOS: A website may be able to access the microphone without the microphone use…

LOW 22

This issue was addressed by removing the vulnerable code.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.01129 Published 2023-10-25 Fixed in 14.1, 13.6 +1

TI-2023-21234 CVE-2023-40416 · GHSA-hp7g-968m-74c4

Memory corruption in Apple iOS and iPadOS

LOW 32

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01468 Published 2023-10-25 Fixed in 16.7, 14.1 +3 CWE-119

TI-2023-21239 CVE-2023-40421 · GHSA-wp7x-2348-v58r

Apple macOS: An app may be able to access sensitive user data

LOW 25

A permissions issue was addressed with additional restrictions.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00365 Published 2023-10-25 Fixed in 14.1, 13.6 +1

Vulnerabilities

Filters