Vulnerabilities

TI-2023-21221 CVE-2023-40402 · GHSA-m7q2-r8fh-369m

Apple macOS: An app may be able to access sensitive user data

LOW 25

A permissions issue was addressed with additional restrictions.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00305 Published 2023-09-26 Fixed in 14

TI-2023-21273 CVE-2023-40455 · GHSA-mwq7-4r6c-mwqg

Apple macOS: A sandboxed process may be able to circumvent sandbox restrictions

MEDIUM 52

A permissions issue was addressed with additional restrictions.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01335 Published 2023-09-26 Fixed in 14

TI-2023-15652 CVE-2023-32361 · GHSA-vvpw-85r2-wv37

Apple iOS and iPadOS: An app may be able to access user-sensitive data

LOW 25

The issue was addressed with improved handling of caches.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00301 Published 2023-09-26 Fixed in 17, 14 +1

TI-2023-21697 CVE-2023-41073 · GHSA-w774-m8r3-4p95

Apple iOS and iPadOS: An app may be able to access protected user data

LOW 25

An authorization issue was addressed with improved state management.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00364 Published 2023-09-26 Fixed in 17, 12.7 +4

TI-2023-15667 CVE-2023-32377 · GHSA-q5p8-g856-f833

Apple macOS: An app may be able to execute arbitrary code with kernel privileges

LOW 36

A buffer overflow issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0032 Published 2023-09-26 Fixed in 14

TI-2023-21689 CVE-2023-41065 · GHSA-h68v-8qr7-q9j7

Apple iOS and iPadOS: An app may be able to read sensitive location information

LOW 16

A privacy issue was addressed with improved private data redaction for log entries.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00348 Published 2023-09-26 Fixed in 17, 14 +1

TI-2023-21252 CVE-2023-40434 · GHSA-pfmr-7m9x-5jwr

Apple iOS and iPadOS: An app may be able to access a user's Photos Library

LOW 16

A configuration issue was addressed with additional restrictions.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00298 Published 2023-09-26 Fixed in 17, 14

TI-2023-21240 CVE-2023-40422 · GHSA-56q7-7qfv-m92r

Apple macOS: An app may be able to cause a denial-of-service

LOW 25

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.003 Published 2023-09-26 Fixed in 14

TI-2023-21218 CVE-2023-40399 · GHSA-xfcx-4xxp-5c2v

Apple iOS and iPadOS: An app may be able to disclose kernel memory

LOW 25

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00323 Published 2023-09-26 Fixed in 17, 14 +1

TI-2023-22366 CVE-2023-41984 · GHSA-w8j8-gh53-mg37

Code injection in Apple iOS and iPadOS

LOW 37

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00476 Published 2023-09-26 Fixed in 17, 12.7 +4 CWE-94

TI-2023-21272 CVE-2023-40454 · GHSA-6vqj-7ffg-x4hr

Apple iOS and iPadOS: An app may be able to delete files for which it does not have…

LOW 31

A permissions issue was addressed with additional restrictions.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00353 Published 2023-09-26 Fixed in 17, 12.7 +4

TI-2023-21222 CVE-2023-40403 · GHSA-j822-w26r-9cxf

Apple iOS and iPadOS: Processing web content may disclose sensitive information

LOW 32

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01327 Published 2023-09-26 Partial fix · 17, 12.7 +4

TI-2023-21214 CVE-2023-40395 · GHSA-cr7x-3cfq-v4qg

Apple iOS and iPadOS: An app may be able to access contacts

LOW 16

The issue was addressed with improved handling of caches.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.0033 Published 2023-09-26 Fixed in 17, 12.7 +3

TI-2023-13865 CVE-2023-29497 · GHSA-m599-xgwr-5wrc

Apple macOS: An app may be able to access calendar data saved to a temporary directory

LOW 16

A privacy issue was addressed with improved handling of temporary files.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00272 Published 2023-09-26 Fixed in 14

TI-2023-21687 CVE-2023-41063 · GHSA-28mg-8v5c-567h

Apple iOS and iPadOS: An app may be able to execute arbitrary code with kernel privileges

LOW 36

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00391 Published 2023-09-26 Fixed in 17, 16.7 +2

TI-2023-21207 CVE-2023-40388 · GHSA-4jjj-95ch-f8xm

Apple macOS: Safari may save photos to an unprotected location

LOW 21

A privacy issue was addressed with improved handling of temporary files.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00778 Published 2023-09-26 Fixed in 14

TI-2023-21250 CVE-2023-40432 · GHSA-6374-4823-w287

Apple iOS and iPadOS: An app may be able to execute arbitrary code with kernel privileges

LOW 36

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00347 Published 2023-09-26 Fixed in 17, 14 +1

TI-2023-19986 CVE-2023-38615 · GHSA-32xr-h3h3-rvqj

Apple macOS: An app may be able to execute arbitrary code with kernel privileges

LOW 36

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00319 Published 2023-09-26 Fixed in 14

TI-2023-21242 CVE-2023-40424 · GHSA-7hqp-mg76-qc4g

Apple iOS and iPadOS: An app may be able to access user-sensitive data

LOW 25

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00311 Published 2023-09-26 Fixed in 17, 14 +1

TI-2023-22376 CVE-2023-41995 · GHSA-8hr7-67mj-f566

Use after free in Apple iOS and iPadOS

LOW 34

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00305 Published 2023-09-26 Fixed in 17, 14 CWE-416

TI-2023-21703 CVE-2023-41079 · GHSA-rrxg-w6px-m5vq

Apple macOS: An app may be able to bypass Privacy preferences

LOW 25

The issue was addressed with improved permissions logic.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00317 Published 2023-09-26 Fixed in 14

TI-2023-21347 CVE-2023-40541 · GHSA-82x9-6jfm-qcmp

Apple macOS: A shortcut may output sensitive user data without consent

LOW 25

This issue was addressed by adding an additional prompt for user consent.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00322 Published 2023-09-26 Fixed in 14

TI-2023-21204 CVE-2023-40384 · GHSA-x9w5-5hgv-7jm8

Apple iOS and iPadOS: An app may be able to read sensitive location information

LOW 16

A permissions issue was addressed with improved redaction of sensitive information.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.0031 Published 2023-09-26 Fixed in 17, 14

TI-2023-20387 CVE-2023-39233 · GHSA-9c9q-frqq-85gm

Apple macOS: Processing web content may disclose sensitive information

LOW 31

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00902 Published 2023-09-26 Fixed in 14

TI-2023-18049 CVE-2023-35990 · GHSA-rvpg-jj9h-7jcw

Incorrect authorization in Apple iOS and iPadOS

LOW 16

The issue was addressed with improved checks.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00286 Published 2023-09-26 Fixed in 17, 16.7 +2 CWE-863

Vulnerabilities

Filters