Vulnerabilities

TI-2023-22932 CVE-2023-42844 · GHSA-2jcp-64q4-69c4

Link following in Apple macOS

MEDIUM 42

This issue was addressed with improved handling of symlinks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01729 Published 2023-10-25 Fixed in 14.1, 13.6 +1 CWE-59

TI-2023-22939 CVE-2023-42852 · GHSA-jmh8-4h3g-x5g5

Apple iOS and iPadOS: Processing web content may lead to arbitrary code execution

MEDIUM 44

A logic issue was addressed with improved checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01979 Published 2023-10-25 Partial fix · 16.7, 17.1 +2

TI-2023-22370 CVE-2023-41989 · GHSA-hhcv-5r95-mwmc

Apple macOS: An attacker may be able to execute arbitrary code as root from the Lock…

LOW 33

The issue was addressed by restricting options offered on a locked device.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00595 Published 2023-10-25 Fixed in 14.1

TI-2023-21241 CVE-2023-40423 · GHSA-c483-xw4j-pmcm

Memory corruption in Apple iOS and iPadOS

LOW 36

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00418 Published 2023-10-25 Fixed in 16.7, 14.1 +3 CWE-119

TI-2023-22937 CVE-2023-42849 · GHSA-4fc2-j39p-mv7v

Memory corruption in Apple iOS and iPadOS

LOW 32

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01544 Published 2023-10-25 Fixed in 16.7, 14.1 +4 CWE-119

TI-2023-22369 CVE-2023-41988 · GHSA-xr44-9893-8w63

Information disclosure in Apple macOS

LOW 33

This issue was addressed by restricting options offered on a locked device.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00588 Published 2023-10-25 Fixed in 14.1, 10.1 +1 CWE-200

TI-2023-21696 CVE-2023-41072 · GHSA-5vg3-8c2w-qh9w

Apple macOS: An app may be able to access sensitive user data

LOW 25

A privacy issue was addressed with improved private data redaction for log entries.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00304 Published 2023-10-25 Fixed in 14.1, 17.1

TI-2023-22933 CVE-2023-42845 · GHSA-fr42-p77x-54x8

Missing authentication in Apple macOS

LOW 32

An authentication issue was addressed with improved state management.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00955 Published 2023-10-25 Fixed in 14.1, 17.1 CWE-306

TI-2023-21227 CVE-2023-40408 · GHSA-8xq6-frf7-63cg

Uncontrolled resource consumption in Apple iOS and iPadOS

LOW 32

An inconsistent user interface issue was addressed with improved state management.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01209 Published 2023-10-25 Fixed in 16.7, 14.1 +2 CWE-400

TI-2023-22359 CVE-2023-41976 · GHSA-4j7x-78x6-53cx

Use after free in Apple iOS and iPadOS

MEDIUM 41

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01685 Published 2023-10-25 Fixed in 16.7, 17.1 +2 CWE-416

TI-2023-21267 CVE-2023-40449 · GHSA-22x6-c42f-8q7h

Memory corruption in Apple iOS and iPadOS

LOW 25

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00333 Published 2023-10-25 Fixed in 16.7, 14.1 +3 CWE-119

TI-2023-21223 CVE-2023-40404 · GHSA-8q5r-gmrx-88jx

Use after free in Apple macOS

LOW 38

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01178 Published 2023-10-25 Fixed in 14.1 CWE-416

TI-2023-21860 CVE-2023-41254 · GHSA-mxqf-9j3w-rv3f

Sensitive information in log files in Apple iOS and iPadOS

LOW 25

A privacy issue was addressed with improved private data redaction for log entries.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00334 Published 2023-10-25 Fixed in 16.7, 14.1 +3 CWE-532

TI-2023-22365 CVE-2023-41983 · GHSA-ch8m-5863-fcr7

Memory corruption in Apple iOS and iPadOS

LOW 32

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01485 Published 2023-10-25 Partial fix · 16.7, 17.1 +1 CWE-119

TI-2023-22930 CVE-2023-42842 · GHSA-6x9f-qr8v-5wfw

Apple macOS: An app may be able to access sensitive user data

LOW 25

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00347 Published 2023-10-25 Fixed in 14.1

TI-2023-22941 CVE-2023-42854 · GHSA-6w99-p6vc-wh73

Apple macOS: An app may be able to cause a denial-of-service to Endpoint Security clients

LOW 25

This issue was addressed by removing the vulnerable code.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00349 Published 2023-10-25 Fixed in 14.1, 13.6 +1

TI-2023-21232 CVE-2023-40413 · GHSA-7j5q-8x2v-mrhw

Apple iOS and iPadOS: An app may be able to read sensitive location information

LOW 25

The issue was addressed with improved handling of caches.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00389 Published 2023-10-25 Fixed in 16.7, 14.1 +4

TI-2023-22364 CVE-2023-41982 · GHSA-qw77-8mx5-p223

Apple iOS and iPadOS: An attacker with physical access may be able to use Siri to access…

LOW 22

This issue was addressed by restricting options offered on a locked device.

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00512 Published 2023-10-25 Fixed in 16.7, 14.1 +2

TI-2023-21262 CVE-2023-40444 · GHSA-w4xv-vxw5-h385

Apple macOS: An app may be able to access user-sensitive data

LOW 25

A permissions issue was addressed with additional restrictions.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00331 Published 2023-10-25 Fixed in 14.1

TI-2023-22604 CVE-2023-42438 · GHSA-hvm3-h7gj-pmfc

Apple macOS: Visiting a malicious website may lead to user interface spoofing

LOW 21

An inconsistent user interface issue was addressed with improved state management.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00776 Published 2023-10-25 Fixed in 14.1

TI-2023-21224 CVE-2023-40405 · GHSA-w8f8-j2jj-6qwh

Sensitive information in log files in Apple macOS

LOW 16

A privacy issue was addressed with improved private data redaction for log entries.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00325 Published 2023-10-25 Fixed in 14.1 CWE-532

TI-2023-22360 CVE-2023-41977 · GHSA-83px-x9cj-8f5g

Apple iOS and iPadOS: Visiting a malicious website may reveal browsing history

LOW 22

The issue was addressed with improved handling of caches.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00825 Published 2023-10-25 Fixed in 16.7, 14.1

TI-2023-22943 CVE-2023-42856 · GHSA-x9v9-7hfr-q9g4

Memory corruption in Apple macOS

LOW 36

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00407 Published 2023-10-25 Fixed in 14.1, 13.6 +1 CWE-119

TI-2023-21265 CVE-2023-40447 · GHSA-6r68-v3jx-h6qg

Memory corruption in Apple iOS and iPadOS

MEDIUM 41

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01668 Published 2023-10-25 Fixed in 16.7, 17.1 +2 CWE-119

TI-2023-22378 CVE-2023-41997 · GHSA-ccvf-q4m9-xf67

Apple iOS and iPadOS: An attacker with physical access may be able to use Siri to access…

LOW 22

This issue was addressed by restricting options offered on a locked device.

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00512 Published 2023-10-25 Fixed in 16.7, 14.1 +2

Vulnerabilities

Filters