Vulnerabilities

TI-2023-19794 CVE-2023-38410 · GHSA-p3x3-92wj-v2j2

Incorrect default permissions in Apple iOS and iPadOS

LOW 35

The issue was addressed with improved checks.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00192 Published 2023-07-26 Fixed in 16.6, 13.5 CWE-276

TI-2023-19978 CVE-2023-38606 · GHSA-8fwg-w59v-g942

Apple tvOS: An app may be able to modify sensitive kernel state

HIGH 82KEV

This issue was addressed with improved state management.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.02899 Published 2023-07-26 Fixed in 16.6, 13.5 +4

TI-2023-18652 CVE-2023-36862 · GHSA-fxwr-68rr-mp8h

Apple macOS: An app may be able to determine a user’s current location

LOW 24

A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00231 Published 2023-07-26 Fixed in 13.5

TI-2023-19969 CVE-2023-38597 · GHSA-xqh8-5mp7-f6qr

Apple Safari: Processing web content may lead to arbitrary code execution

MEDIUM 40

The issue was addressed with improved checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01211 Published 2023-07-26 Partial fix · 16.6, 13.5 +1

TI-2023-15671 CVE-2023-32381 · GHSA-g5hv-c3g8-mc9x

Use after free in Apple tvOS

LOW 36

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00244 Published 2023-07-26 Fixed in 16.6, 13.5 +3 CWE-416

TI-2023-18646 CVE-2023-36854 · GHSA-7jfp-674j-r5f2

Apple macOS: Processing a file may lead to unexpected app termination or arbitrary code…

LOW 36

The issue was addressed with improved checks.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0033 Published 2023-07-26 Fixed in 13.5, 11.7 +1

TI-2023-18043 CVE-2023-35983 · GHSA-gm85-c692-g62r

Incorrect authorization in Apple macOS

LOW 24

This issue was addressed with improved data protection.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00221 Published 2023-07-26 Fixed in 13.5, 11.7 +1 CWE-863

TI-2023-15720 CVE-2023-32433 · GHSA-mv36-fpw2-f7fp

Use after free in Apple tvOS

LOW 36

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00298 Published 2023-07-26 Fixed in 16.6, 13.5 +4 CWE-416

TI-2023-19966 CVE-2023-38594 · GHSA-rv3f-cww5-rv8r

Apple Safari: Processing web content may lead to arbitrary code execution

MEDIUM 41

The issue was addressed with improved checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01243 Published 2023-07-26 Partial fix · 16.6, 13.5 +2

TI-2023-19556 CVE-2023-38133 · GHSA-57gp-c4c9-4j3c

Apple Safari: Processing web content may disclose sensitive information

LOW 31

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01043 Published 2023-07-26 Partial fix · 16.6, 13.5 +2

TI-2023-19062 CVE-2023-37450 · GHSA-v874-wp44-mhr4

Apple Safari: Processing web content may lead to arbitrary code execution

CRITICAL 97KEV

The issue was addressed with improved checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.1895 Published 2023-07-26 Partial fix · 16.5, 16.6 +2

Vulnerabilities

Filters