Vulnerabilities

TI-2023-21697 CVE-2023-41073 · GHSA-w774-m8r3-4p95

Apple iOS and iPadOS: An app may be able to access protected user data

LOW 25

An authorization issue was addressed with improved state management.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00364 Published 2023-09-26 Fixed in 17, 12.7 +4

TI-2023-21841 CVE-2023-41232 · GHSA-8f5c-hvhx-f7c6

Out-of-bounds read in Apple iOS and iPadOS

LOW 25

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00314 Published 2023-09-26 Fixed in 17, 12.7 +2 CWE-125

TI-2023-22366 CVE-2023-41984 · GHSA-w8j8-gh53-mg37

Code injection in Apple iOS and iPadOS

LOW 37

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00476 Published 2023-09-26 Fixed in 17, 12.7 +4 CWE-94

TI-2023-21692 CVE-2023-41068 · GHSA-3cvg-mp22-q8rc

Apple iOS and iPadOS: A user may be able to elevate privileges

LOW 36

An access issue was addressed with improved access restrictions.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00358 Published 2023-09-26 Fixed in 17, 16.7 +1

TI-2023-21272 CVE-2023-40454 · GHSA-6vqj-7ffg-x4hr

Apple iOS and iPadOS: An app may be able to delete files for which it does not have…

LOW 31

A permissions issue was addressed with additional restrictions.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00353 Published 2023-09-26 Fixed in 17, 12.7 +4

TI-2023-21222 CVE-2023-40403 · GHSA-j822-w26r-9cxf

Apple iOS and iPadOS: Processing web content may disclose sensitive information

LOW 32

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01327 Published 2023-09-26 Partial fix · 17, 12.7 +4

TI-2023-21214 CVE-2023-40395 · GHSA-cr7x-3cfq-v4qg

Apple iOS and iPadOS: An app may be able to access contacts

LOW 16

The issue was addressed with improved handling of caches.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.0033 Published 2023-09-26 Fixed in 17, 12.7 +3

TI-2023-21687 CVE-2023-41063 · GHSA-28mg-8v5c-567h

Apple iOS and iPadOS: An app may be able to execute arbitrary code with kernel privileges

LOW 36

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00391 Published 2023-09-26 Fixed in 17, 16.7 +2

TI-2023-18049 CVE-2023-35990 · GHSA-rvpg-jj9h-7jcw

Incorrect authorization in Apple iOS and iPadOS

LOW 16

The issue was addressed with improved checks.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00286 Published 2023-09-26 Fixed in 17, 16.7 +2 CWE-863

TI-2023-21266 CVE-2023-40448 · GHSA-28fp-mw8j-xfc5

Apple iOS and iPadOS: A remote attacker may be able to break out of Web Content sandbox

MEDIUM 47

The issue was addressed with improved handling of protocols.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.0218 Published 2023-09-26 Fixed in 17, 16.7 +2

TI-2023-22363 CVE-2023-41981 · GHSA-5f2c-86wv-pg43

Apple iOS and iPadOS: An attacker that has already achieved kernel code execution may be…

LOW 21

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.00393 Published 2023-09-26 Fixed in 17, 16.7 +3

TI-2023-21238 CVE-2023-40420 · GHSA-r938-62rj-g37c

Apple iOS and iPadOS: Processing web content may lead to a denial-of-service

LOW 32

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01419 Published 2023-09-26 Fixed in 17, 12.7 +4

TI-2023-21694 CVE-2023-41070 · GHSA-2x59-x82p-xm32

Apple iOS and iPadOS: An app may be able to access sensitive data logged when a user…

LOW 25

A logic issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00355 Published 2023-09-26 Fixed in 17, 16.7 +3

Vulnerabilities

Filters