Vulnerabilities

TI-2023-22939 CVE-2023-42852 · GHSA-jmh8-4h3g-x5g5

Apple iOS and iPadOS: Processing web content may lead to arbitrary code execution

MEDIUM 44

A logic issue was addressed with improved checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01979 Published 2023-10-25 Partial fix · 16.7, 17.1 +2

TI-2023-21241 CVE-2023-40423 · GHSA-c483-xw4j-pmcm

Memory corruption in Apple iOS and iPadOS

LOW 36

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00418 Published 2023-10-25 Fixed in 16.7, 14.1 +3 CWE-119

TI-2023-22937 CVE-2023-42849 · GHSA-4fc2-j39p-mv7v

Memory corruption in Apple iOS and iPadOS

LOW 32

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01544 Published 2023-10-25 Fixed in 16.7, 14.1 +4 CWE-119

TI-2023-21227 CVE-2023-40408 · GHSA-8xq6-frf7-63cg

Uncontrolled resource consumption in Apple iOS and iPadOS

LOW 32

An inconsistent user interface issue was addressed with improved state management.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01209 Published 2023-10-25 Fixed in 16.7, 14.1 +2 CWE-400

TI-2023-22359 CVE-2023-41976 · GHSA-4j7x-78x6-53cx

Use after free in Apple iOS and iPadOS

MEDIUM 41

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01685 Published 2023-10-25 Fixed in 16.7, 17.1 +2 CWE-416

TI-2023-21267 CVE-2023-40449 · GHSA-22x6-c42f-8q7h

Memory corruption in Apple iOS and iPadOS

LOW 25

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00333 Published 2023-10-25 Fixed in 16.7, 14.1 +3 CWE-119

TI-2023-21860 CVE-2023-41254 · GHSA-mxqf-9j3w-rv3f

Sensitive information in log files in Apple iOS and iPadOS

LOW 25

A privacy issue was addressed with improved private data redaction for log entries.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00334 Published 2023-10-25 Fixed in 16.7, 14.1 +3 CWE-532

TI-2023-22365 CVE-2023-41983 · GHSA-ch8m-5863-fcr7

Memory corruption in Apple iOS and iPadOS

LOW 32

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01485 Published 2023-10-25 Partial fix · 16.7, 17.1 +1 CWE-119

TI-2023-21232 CVE-2023-40413 · GHSA-7j5q-8x2v-mrhw

Apple iOS and iPadOS: An app may be able to read sensitive location information

LOW 25

The issue was addressed with improved handling of caches.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00389 Published 2023-10-25 Fixed in 16.7, 14.1 +4

TI-2023-22364 CVE-2023-41982 · GHSA-qw77-8mx5-p223

Apple iOS and iPadOS: An attacker with physical access may be able to use Siri to access…

LOW 22

This issue was addressed by restricting options offered on a locked device.

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00512 Published 2023-10-25 Fixed in 16.7, 14.1 +2

TI-2023-22360 CVE-2023-41977 · GHSA-83px-x9cj-8f5g

Apple iOS and iPadOS: Visiting a malicious website may reveal browsing history

LOW 22

The issue was addressed with improved handling of caches.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00825 Published 2023-10-25 Fixed in 16.7, 14.1

TI-2023-21265 CVE-2023-40447 · GHSA-6r68-v3jx-h6qg

Memory corruption in Apple iOS and iPadOS

MEDIUM 41

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01668 Published 2023-10-25 Fixed in 16.7, 17.1 +2 CWE-119

TI-2023-22378 CVE-2023-41997 · GHSA-ccvf-q4m9-xf67

Apple iOS and iPadOS: An attacker with physical access may be able to use Siri to access…

LOW 22

This issue was addressed by restricting options offered on a locked device.

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00512 Published 2023-10-25 Fixed in 16.7, 14.1 +2

TI-2023-22929 CVE-2023-42841 · GHSA-w3ff-vvc7-jg8f

Memory corruption in Apple iOS and iPadOS

LOW 36

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00345 Published 2023-10-25 Fixed in 16.7, 14.1 +2 CWE-119

TI-2023-22934 CVE-2023-42846 · GHSA-9mh4-4vr9-p4jq

Information disclosure in Apple iOS and iPadOS

LOW 33

This issue was addressed by removing the vulnerable code.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01293 Published 2023-10-25 Fixed in 16.7, 17.1 +1 CWE-200

TI-2023-21234 CVE-2023-40416 · GHSA-hp7g-968m-74c4

Memory corruption in Apple iOS and iPadOS

LOW 32

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01468 Published 2023-10-25 Fixed in 16.7, 14.1 +3 CWE-119

TI-2023-15650 CVE-2023-32359 · GHSA-m58q-xcxc-4q6h

Apple iOS and iPadOS: A user's password may be read aloud by VoiceOver

LOW 35

This issue was addressed with improved redaction of sensitive information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01129 Published 2023-10-25 Partial fix · 16.7

Vulnerabilities

Filters