Vulnerabilities

TI-2023-21233 CVE-2023-40414 · GHSA-rvwq-r5pc-g3h9

Use after free in Apple iOS and iPadOS

MEDIUM 45

A use-after-free issue was addressed with improved memory management.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01151 Published 2024-01-10 Partial fix · 17, 14 +1 CWE-416

TI-2023-21256 CVE-2023-40438 · GHSA-95h7-88rj-5gc6

Apple iOS and iPadOS: An app may be able to access edited photos saved to a temporary…

LOW 24

An issue was addressed with improved handling of temporary files.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00215 Published 2024-01-10 Fixed in 16.7, 14 CWE-379

TI-2023-22956 CVE-2023-42872 · GHSA-c9cg-r57m-xqj9

Apple iOS and iPadOS: An app may be able to access sensitive user data

LOW 24

The issue was addressed with additional permissions checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00213 Published 2024-01-10 Fixed in 17, 14

TI-2023-22922 CVE-2023-42833 · GHSA-q6j4-xjv3-96rj

Code injection in Apple iOS and iPadOS

MEDIUM 42

A correctness issue was addressed with improved checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00993 Published 2024-01-10 Partial fix · 17, 14 CWE-94

TI-2023-19984 CVE-2023-38612 · GHSA-75jg-grf9-g4cv

Apple iOS and iPadOS: An app may be able to access protected user data

LOW 15

The issue was addressed with improved checks.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00212 Published 2024-01-10 Fixed in 17, 12.7 +3

TI-2023-21205 CVE-2023-40385 · GHSA-42hw-x9jg-7942

Information disclosure in Apple iOS and iPadOS

LOW 30

This issue was addressed by removing the vulnerable code.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00774 Published 2024-01-10 Fixed in 17, 14 CWE-200

TI-2023-22375 CVE-2023-41994 · GHSA-4hqq-f6h3-3pgp

Incorrect authorization in Apple macOS

LOW 24

A logic issue was addressed with improved checks This issue is fixed in macOS Sonoma 14.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00222 Published 2024-01-10 Fixed in 14 CWE-863

TI-2023-21212 CVE-2023-40393 · GHSA-v2hh-gf42-8pxh

Missing authentication in Apple iOS and iPadOS

MEDIUM 40

An authentication issue was addressed with improved state management.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00703 Published 2024-01-10 Fixed in 17, 14 CWE-306

TI-2023-21248 CVE-2023-40430 · GHSA-44hp-hmpq-cgw3

Improper authorization in Apple macOS

LOW 24

A logic issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00222 Published 2024-01-10 Fixed in 14 CWE-285

TI-2023-23010 CVE-2023-42933 · GHSA-cj5p-x443-5mhx

Apple macOS: An app may be able to gain elevated privileges

LOW 35

This issue was addressed with improved checks.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00217 Published 2024-01-10 Fixed in 14

TI-2023-22960 CVE-2023-42876 · GHSA-cfv4-qcjx-m9hp

Apple macOS: Processing a file may lead to a denial-of-service or potentially disclose…

LOW 31

The issue was addressed with improved bounds checks.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00211 Published 2024-01-10 Fixed in 14

TI-2023-23006 CVE-2023-42929 · GHSA-5hmw-x4vw-66rw

Apple macOS: An app may be able to access protected user data

LOW 24

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00212 Published 2024-01-10 Fixed in 14

TI-2023-21230 CVE-2023-40411 · GHSA-xqfv-g7r7-7v7j

Information disclosure in Apple macOS

LOW 24

This issue was addressed with improved data protection.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00211 Published 2024-01-10 Fixed in 14 CWE-200

TI-2023-21685 CVE-2023-41060 · GHSA-5727-96qh-72m5

Type confusion in Apple iOS and iPadOS

MEDIUM 49

A type confusion issue was addressed with improved checks.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01266 Published 2024-01-10 Fixed in 17, 14 CWE-843

TI-2023-22368 CVE-2023-41987 · GHSA-9h8x-j6vr-8v9f

Information disclosure in Apple macOS

LOW 24

This issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00211 Published 2024-01-10 Fixed in 14 CWE-200

TI-2023-19979 CVE-2023-38607 · GHSA-2cr4-grq6-5cq2

Apple macOS: An app may be able to modify Printer settings

LOW 24

The issue was addressed with improved handling of caches.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00196 Published 2024-01-10 Fixed in 14

TI-2023-22954 CVE-2023-42870 · GHSA-7p34-9q56-jm92

Use after free in Apple iOS and iPadOS

LOW 35

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00216 Published 2024-01-10 Fixed in 17, 14 CWE-416

TI-2023-22916 CVE-2023-42826 · GHSA-72pr-8c6x-68jq

Improper input validation in Apple macOS

LOW 36

The issue was addressed with improved checks.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00241 Published 2024-01-10 Fixed in 14 CWE-20

TI-2023-23011 CVE-2023-42934 · GHSA-h6m7-6h9c-8vm2

Information disclosure in Apple iOS and iPadOS

LOW 19

An information disclosure issue was addressed by removing the vulnerable code.

CVSS 3.1MEDIUM 4.2 Local High privileges User interaction EPSS 0.00215 Published 2024-01-10 Fixed in 17, 14 CWE-200

TI-2023-22955 CVE-2023-42871 · GHSA-rgqw-78cv-wmcg

Out-of-bounds write in Apple iOS and iPadOS

LOW 35

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00222 Published 2024-01-10 Fixed in 17, 14 CWE-787

TI-2023-19982 CVE-2023-38610 · GHSA-8xm3-6rqx-8rwj

Out-of-bounds write in Apple iOS and iPadOS

LOW 31

A memory corruption issue was addressed by removing the vulnerable code.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00218 Published 2024-01-10 Fixed in 17, 14 CWE-787

Vulnerabilities

Filters