Vulnerabilities

TI-2023-23032 CVE-2023-42956 · GHSA-jprr-pf4r-gvp5

Apple Safari: Processing web content may lead to a denial-of-service

LOW 31

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00981 Published 2024-03-28 Partial fix · 17.2, 14.2

TI-2023-23013 CVE-2023-42936 · GHSA-jg48-xvhq-mrmw

Information disclosure in Apple iOS and iPadOS

LOW 30

This issue was addressed with improved redaction of sensitive information.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00216 Published 2024-03-28 Fixed in 17.2, 13.6 +3 CWE-200

TI-2023-23008 CVE-2023-42931 · GHSA-r9x8-r5r4-mq7c

Apple macOS: A process may gain admin privileges without proper authentication

HIGH 71

The issue was addressed with improved checks.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.01171 Published 2024-03-28 Fixed in 13.6, 12.7 +1 CWE-280

TI-2023-23026 CVE-2023-42950 · GHSA-6cvp-282g-6jp8

Use after free in Apple Safari

MEDIUM 42

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01069 Published 2024-03-28 Partial fix · 17.2, 14.2 +1 CWE-416

TI-2023-23023 CVE-2023-42947 · GHSA-948m-5vcf-j8g5

Path traversal in Apple iOS and iPadOS

LOW 39

A path handling issue was addressed with improved validation.

CVSS 3.1HIGH 8.6 Local No auth User interaction EPSS 0.00253 Published 2024-03-28 Fixed in 17.2, 13.6 +3 CWE-22

TI-2023-22976 CVE-2023-42896 · GHSA-xcwm-wrf2-369r

Missing authorization in Apple iOS and iPadOS

LOW 24

An issue was addressed with improved handling of temporary files.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00203 Published 2024-03-28 Fixed in 17.2, 16.7 +3 CWE-862

TI-2023-23007 CVE-2023-42930 · GHSA-77m3-8vw3-fw8w

Apple macOS: An app may be able to modify protected parts of the file system

LOW 24

This issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00197 Published 2024-03-28 Fixed in 13.6, 12.7 +1

TI-2023-22993 CVE-2023-42913 · GHSA-fh7f-4794-fgr3

Insecure storage of sensitive information in Apple macOS

MEDIUM 41

This issue was addressed through improved state management.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0054 Published 2024-03-28 Fixed in 14.2 CWE-922

TI-2023-21209 CVE-2023-40390 · GHSA-mrx6-42xr-335p

Apple macOS: An app may be able to access user-sensitive data

LOW 24

A privacy issue was addressed by moving sensitive data to a protected location.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00196 Published 2024-03-28 Fixed in 14.2

TI-2023-22974 CVE-2023-42893 · GHSA-qw7q-x9r6-v6fr

Apple iOS and iPadOS: An app may be able to access protected user data

LOW 26

A permissions issue was addressed by removing vulnerable code and adding additional checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00262 Published 2024-03-28 Fixed in 17.2, 16.7 +4

TI-2023-23041 CVE-2023-42974 · GHSA-42pj-35w6-4jwg

Race condition in Apple iOS and iPadOS

LOW 32

A race condition was addressed with improved state handling.

CVSS 3.1HIGH 7.0 Local No auth User interaction EPSS 0.00148 Published 2024-03-28 Fixed in 17.2, 16.7 +3 CWE-362

TI-2023-22973 CVE-2023-42892 · GHSA-mqr3-mxfg-8rw7

Use after free in Apple macOS

LOW 35

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00192 Published 2024-03-28 Fixed in 13.6, 12.7 +1 CWE-416

Vulnerabilities

Filters