Vulnerabilities

TI-2023-22976 CVE-2023-42896 · GHSA-xcwm-wrf2-369r

Missing authorization in Apple iOS and iPadOS

LOW 24

An issue was addressed with improved handling of temporary files.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00203 Published 2024-03-28 Fixed in 17.2, 16.7 +3 CWE-862

TI-2023-22974 CVE-2023-42893 · GHSA-qw7q-x9r6-v6fr

LOW 26

A permissions issue was addressed by removing vulnerable code and adding additional checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00262 Published 2024-03-28 Fixed in 17.2, 16.7 +4

TI-2023-23041 CVE-2023-42974 · GHSA-42pj-35w6-4jwg

LOW 32

A race condition was addressed with improved state handling.

CVSS 3.1HIGH 7.0 Local No auth User interaction EPSS 0.00148 Published 2024-03-28 Fixed in 17.2, 16.7 +3 CWE-362

TI-2023-23037 CVE-2023-42962 · GHSA-h64q-p2cr-jmw7

LOW 34

This issue was addressed with improved checks This issue is fixed in iOS 17.2 and iPadOS 17.2, iOS 16.7.3 and iPadOS 16.7.3.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00805 Published 2024-03-28 Fixed in 17.2, 16.7