Vulnerabilities

TI-2023-15652 CVE-2023-32361 · GHSA-vvpw-85r2-wv37

Apple iOS and iPadOS: An app may be able to access user-sensitive data

LOW 25

The issue was addressed with improved handling of caches.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00301 Published 2023-09-26 Fixed in 17, 14 +1

TI-2023-21697 CVE-2023-41073 · GHSA-w774-m8r3-4p95

Apple iOS and iPadOS: An app may be able to access protected user data

LOW 25

An authorization issue was addressed with improved state management.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00364 Published 2023-09-26 Fixed in 17, 12.7 +4

TI-2023-21689 CVE-2023-41065 · GHSA-h68v-8qr7-q9j7

Apple iOS and iPadOS: An app may be able to read sensitive location information

LOW 16

A privacy issue was addressed with improved private data redaction for log entries.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00348 Published 2023-09-26 Fixed in 17, 14 +1

TI-2023-21237 CVE-2023-40419 · GHSA-rw6r-jpf5-c58h

Apple iOS and iPadOS: An app may be able to gain elevated privileges

LOW 36

The issue was addressed with improved checks.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00299 Published 2023-09-26 Fixed in 17, 10

TI-2023-21218 CVE-2023-40399 · GHSA-xfcx-4xxp-5c2v

Apple iOS and iPadOS: An app may be able to disclose kernel memory

LOW 25

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00323 Published 2023-09-26 Fixed in 17, 14 +1

TI-2023-22366 CVE-2023-41984 · GHSA-w8j8-gh53-mg37

Code injection in Apple iOS and iPadOS

LOW 37

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00476 Published 2023-09-26 Fixed in 17, 12.7 +4 CWE-94

TI-2023-21692 CVE-2023-41068 · GHSA-3cvg-mp22-q8rc

Apple iOS and iPadOS: A user may be able to elevate privileges

LOW 36

An access issue was addressed with improved access restrictions.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00358 Published 2023-09-26 Fixed in 17, 16.7 +1

TI-2023-21272 CVE-2023-40454 · GHSA-6vqj-7ffg-x4hr

Apple iOS and iPadOS: An app may be able to delete files for which it does not have…

LOW 31

A permissions issue was addressed with additional restrictions.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00353 Published 2023-09-26 Fixed in 17, 12.7 +4

TI-2023-21222 CVE-2023-40403 · GHSA-j822-w26r-9cxf

Apple iOS and iPadOS: Processing web content may disclose sensitive information

LOW 32

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01327 Published 2023-09-26 Partial fix · 17, 12.7 +4

TI-2023-21214 CVE-2023-40395 · GHSA-cr7x-3cfq-v4qg

Apple iOS and iPadOS: An app may be able to access contacts

LOW 16

The issue was addressed with improved handling of caches.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.0033 Published 2023-09-26 Fixed in 17, 12.7 +3

TI-2023-21687 CVE-2023-41063 · GHSA-28mg-8v5c-567h

Apple iOS and iPadOS: An app may be able to execute arbitrary code with kernel privileges

LOW 36

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00391 Published 2023-09-26 Fixed in 17, 16.7 +2

TI-2023-21336 CVE-2023-40520 · GHSA-46j4-vxcj-whxf

Apple iOS and iPadOS: An app may be able to access edited photos saved to a temporary…

LOW 16

The issue was addressed with improved checks.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00297 Published 2023-09-26 Fixed in 17, 10

TI-2023-21250 CVE-2023-40432 · GHSA-6374-4823-w287

Apple iOS and iPadOS: An app may be able to execute arbitrary code with kernel privileges

LOW 36

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00347 Published 2023-09-26 Fixed in 17, 14 +1

TI-2023-21204 CVE-2023-40384 · GHSA-x9w5-5hgv-7jm8

Apple iOS and iPadOS: An app may be able to read sensitive location information

LOW 16

A permissions issue was addressed with improved redaction of sensitive information.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.0031 Published 2023-09-26 Fixed in 17, 14

TI-2023-21231 CVE-2023-40412 · GHSA-v883-r445-xw8x

Apple iOS and iPadOS: An app may be able to execute arbitrary code with kernel privileges

LOW 36

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0036 Published 2023-09-26 Fixed in 17, 12.7 +2

TI-2023-21247 CVE-2023-40429 · GHSA-pfjg-2mfr-vf96

Apple iOS and iPadOS: An app may be able to access sensitive user data

LOW 26

A permissions issue was addressed with improved validation.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00579 Published 2023-09-26 Fixed in 17, 14 +1

TI-2023-21270 CVE-2023-40452 · GHSA-xwfx-q77c-v4gg

Apple iOS and iPadOS: An app may be able to overwrite arbitrary files

LOW 31

The issue was addressed with improved bounds checks.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00353 Published 2023-09-26 Fixed in 17, 12.7 +3

TI-2023-21266 CVE-2023-40448 · GHSA-28fp-mw8j-xfc5

Apple iOS and iPadOS: A remote attacker may be able to break out of Web Content sandbox

MEDIUM 47

The issue was addressed with improved handling of protocols.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.0218 Published 2023-09-26 Fixed in 17, 16.7 +2

TI-2023-21698 CVE-2023-41074 · GHSA-xq9m-9whg-jv3m

Code injection in Apple iOS and iPadOS

MEDIUM 47

The issue was addressed with improved checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04122 Published 2023-09-26 Partial fix · 17, 14 +1 CWE-94

TI-2023-21228 CVE-2023-40409 · GHSA-r9jr-jpgm-rcwh

Apple iOS and iPadOS: An app may be able to execute arbitrary code with kernel privileges

LOW 36

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0036 Published 2023-09-26 Fixed in 17, 12.7 +2

TI-2023-18044 CVE-2023-35984 · GHSA-w9vv-2frm-2qmf

Out-of-bounds write in Apple iOS and iPadOS

LOW 21

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 4.3 Physical No auth No interaction EPSS 0.00797 Published 2023-09-26 Fixed in 17, 14 +1 CWE-787

TI-2023-21229 CVE-2023-40410 · GHSA-2rv6-mjm4-w26j

Out-of-bounds read in Apple iOS and iPadOS

LOW 25

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00308 Published 2023-09-26 Fixed in 17, 12.7 +3 CWE-125

TI-2023-22363 CVE-2023-41981 · GHSA-5f2c-86wv-pg43

Apple iOS and iPadOS: An attacker that has already achieved kernel code execution may be…

LOW 21

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.00393 Published 2023-09-26 Fixed in 17, 16.7 +3

TI-2023-21210 CVE-2023-40391 · GHSA-2wwc-c62q-7wrf

Apple iOS and iPadOS: An app may be able to disclose kernel memory

LOW 25

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00323 Published 2023-09-26 Fixed in 17, 15 +1

TI-2023-21245 CVE-2023-40427 · GHSA-j4qv-qfhf-cx6c

Apple iOS and iPadOS: An app may be able to read sensitive location information

LOW 16

The issue was addressed with improved handling of caches.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00317 Published 2023-09-26 Fixed in 17, 12.7 +3

Vulnerabilities

Filters