Vulnerabilities

TI-2023-15726 CVE-2023-32439 · GHSA-rh53-wvg6-9v8m

Type confusion in Apple iOS and iPadOS

CRITICAL 97KEV

A type confusion issue was addressed with improved checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.23968 Published 2023-06-23 Partial fix · 15.7, 16.5 +1 CWE-843

TI-2023-15721 CVE-2023-32434 · GHSA-4pvh-jrgh-mpvj

Integer overflow in Apple macOS

CRITICAL 93KEV

An integer overflow was addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.51517 Published 2023-06-23 Fixed in 12.6, 15.7 +5 CWE-190

TI-2023-15712 CVE-2023-32423 · GHSA-4f23-rq6h-3p55

Buffer overflow in Apple macOS

LOW 30

A buffer overflow issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00794 Published 2023-06-23 Fixed in 13.4, 16.5 +1 CWE-120

TI-2023-15711 CVE-2023-32422 · GHSA-jcrf-9h4p-jxgw

Apple macOS: An app may be able to bypass Privacy preferences

LOW 26

This issue was addressed by adding additional SQLite logging restrictions.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00667 Published 2023-06-23 Fixed in 13.4, 16.5

TI-2023-15709 CVE-2023-32420 · GHSA-m33v-qc6h-625w

Out-of-bounds read in Apple macOS

LOW 31

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00249 Published 2023-06-23 Fixed in 13.4, 9.5 +1 CWE-125

TI-2023-15704 CVE-2023-32415 · GHSA-hhrm-pcc6-hw9f

Insecure storage of sensitive information in Apple macOS

LOW 24

This issue was addressed with improved redaction of sensitive information.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00251 Published 2023-06-23 Fixed in 13.4, 16.5 CWE-922

TI-2023-15703 CVE-2023-32414 · GHSA-q56w-x564-6hw9

Apple macOS: An app may be able to break out of its sandbox

LOW 38

The issue was addressed with improved checks.

CVSS 3.1HIGH 8.6 Local No auth User interaction EPSS 0.00169 Published 2023-06-23 Fixed in 13.4 CWE-326

TI-2023-15702 CVE-2023-32413 · GHSA-gh6r-5j4w-4632

Race condition in Apple macOS

LOW 34

A race condition was addressed with improved state handling.

CVSS 3.1HIGH 7.0 Local No auth User interaction EPSS 0.00542 Published 2023-06-23 Fixed in 13.4, 12.6 +4 CWE-362

TI-2023-15701 CVE-2023-32412 · GHSA-jrxw-rfgx-9ghf

Use after free in Apple macOS

MEDIUM 52

A use-after-free issue was addressed with improved memory management.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01593 Published 2023-06-23 Fixed in 13.4, 12.6 +4 CWE-416

TI-2023-15700 CVE-2023-32411 · GHSA-r9j8-fv6p-qhj6

Apple macOS: An app may be able to bypass Privacy preferences

LOW 24

This issue was addressed with improved entitlements.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00244 Published 2023-06-23 Fixed in 13.4, 12.6 +2

TI-2023-15699 CVE-2023-32410 · GHSA-6hpg-f675-g9v4

Out-of-bounds read in Apple macOS

LOW 24

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00248 Published 2023-06-23 Fixed in 13.4, 12.6 +2 CWE-125

TI-2023-15698 CVE-2023-32409 · GHSA-hwfm-xf3j-ph3g

Apple macOS: A remote attacker may be able to break out of Web Content sandbox

CRITICAL 94KEV

The issue was addressed with improved bounds checks.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.1653 Published 2023-06-23 Partial fix · 13.4, 16.5 +2

TI-2023-15697 CVE-2023-32408 · GHSA-q6w7-v484-c63j

Apple macOS: An app may be able to read sensitive location information

LOW 24

The issue was addressed with improved handling of caches.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00248 Published 2023-06-23 Fixed in 13.4, 12.6 +3

TI-2023-15696 CVE-2023-32407 · GHSA-r5j8-wxqq-r73c

Incorrect default permissions in Apple macOS

LOW 27

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00935 Published 2023-06-23 Fixed in 13.4, 12.6 +4 CWE-276

TI-2023-15695 CVE-2023-32405 · GHSA-xvfj-9qc8-3jgp

Incorrect default permissions in Apple macOS

LOW 36

A logic issue was addressed with improved checks.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00245 Published 2023-06-23 Fixed in 13.4, 12.6 +1 CWE-276

TI-2023-15694 CVE-2023-32404 · GHSA-9v2j-gwj5-x7r3

Incorrect default permissions in Apple macOS

LOW 24

This issue was addressed with improved entitlements.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00237 Published 2023-06-23 Fixed in 13.4, 9.5 +1 CWE-276

TI-2023-15693 CVE-2023-32403 · GHSA-c3qh-423w-97gw

Out-of-bounds read in Apple macOS

LOW 24

This issue was addressed with improved redaction of sensitive information.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00235 Published 2023-06-23 Fixed in 13.4, 12.6 +4 CWE-125

TI-2023-15692 CVE-2023-32402 · GHSA-7chq-g87j-225j

Out-of-bounds read in Apple macOS

LOW 30

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00719 Published 2023-06-23 Fixed in 13.4, 16.5 +1 CWE-125

TI-2023-15690 CVE-2023-32400 · GHSA-w643-wvhg-95x9

Apple macOS: Entitlements and privacy permissions granted to this app may be used by a…

LOW 24

This issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00232 Published 2023-06-23 Fixed in 13.4, 9.5 +1 CWE-281

TI-2023-15689 CVE-2023-32399 · GHSA-w5p2-597r-pjgr

Incorrect default permissions in Apple macOS

LOW 24

The issue was addressed with improved handling of caches.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00235 Published 2023-06-23 Fixed in 13.4, 9.5 +1 CWE-276

TI-2023-15688 CVE-2023-32398 · GHSA-m23j-mxgf-384m

Use after free in Apple macOS

LOW 36

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00239 Published 2023-06-23 Fixed in 13.4, 12.6 +4 CWE-416

TI-2023-15687 CVE-2023-32397 · GHSA-gg5r-fr32-9pp8

Out-of-bounds write in Apple macOS

MEDIUM 40

A logic issue was addressed with improved state management.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00757 Published 2023-06-23 Fixed in 13.4, 12.6 +2 CWE-787

TI-2023-15685 CVE-2023-32395 · GHSA-h3rv-hgr9-469j

Out-of-bounds write in Apple macOS

LOW 24

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00261 Published 2023-06-23 Fixed in 13.4, 12.6 +1 CWE-787

TI-2023-15684 CVE-2023-32394 · GHSA-pjh7-qqhq-g74c

Exposure of resource to wrong sphere in Apple macOS

LOW 12

The issue was addressed with improved checks.

CVSS 3.1LOW 2.4 Physical No auth No interaction EPSS 0.00329 Published 2023-06-23 Fixed in 13.4, 9.5 +1 CWE-668

TI-2023-15682 CVE-2023-32392 · GHSA-9m2c-rxh3-q83m

Sensitive information in log files in Apple macOS

LOW 30

A privacy issue was addressed with improved private data redaction for log entries.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00248 Published 2023-06-23 Fixed in 13.4, 12.6 +3 CWE-532

Vulnerabilities

Filters