Vulnerabilities

TI-2023-23013 CVE-2023-42936 · GHSA-jg48-xvhq-mrmw

Information disclosure in Apple iOS and iPadOS

LOW 30

This issue was addressed with improved redaction of sensitive information.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00216 Published 2024-03-28 Fixed in 17.2, 13.6 +3 CWE-200

TI-2023-23008 CVE-2023-42931 · GHSA-r9x8-r5r4-mq7c

HIGH 71

The issue was addressed with improved checks.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.01171 Published 2024-03-28 Fixed in 13.6, 12.7 +1 CWE-280

TI-2023-23023 CVE-2023-42947 · GHSA-948m-5vcf-j8g5

LOW 39

A path handling issue was addressed with improved validation.

CVSS 3.1HIGH 8.6 Local No auth User interaction EPSS 0.00253 Published 2024-03-28 Fixed in 17.2, 13.6 +3 CWE-22

TI-2023-22976 CVE-2023-42896 · GHSA-xcwm-wrf2-369r

LOW 24

An issue was addressed with improved handling of temporary files.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00203 Published 2024-03-28 Fixed in 17.2, 16.7 +3 CWE-862

TI-2023-23007 CVE-2023-42930 · GHSA-77m3-8vw3-fw8w

LOW 24

This issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00197 Published 2024-03-28 Fixed in 13.6, 12.7 +1

TI-2023-22974 CVE-2023-42893 · GHSA-qw7q-x9r6-v6fr

LOW 26

A permissions issue was addressed by removing vulnerable code and adding additional checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00262 Published 2024-03-28 Fixed in 17.2, 16.7 +4

TI-2023-23041 CVE-2023-42974 · GHSA-42pj-35w6-4jwg

LOW 32

A race condition was addressed with improved state handling.

CVSS 3.1HIGH 7.0 Local No auth User interaction EPSS 0.00148 Published 2024-03-28 Fixed in 17.2, 16.7 +3 CWE-362

TI-2023-22973 CVE-2023-42892 · GHSA-mqr3-mxfg-8rw7

LOW 35

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00192 Published 2024-03-28 Fixed in 13.6, 12.7 +1 CWE-416