Vulnerabilities

TI-2024-15368 CVE-2024-23263 · GHSA-xrrw-7rr2-829v

Improper input validation in Apple Safari

MEDIUM 40

A logic issue was addressed with improved validation.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.01496 Published 2024-03-08 Partial fix · 17.4, 16.7.6 +3 CWE-20

TI-2024-15385 CVE-2024-23280 · GHSA-qc99-8rmf-q4mv

Injection in Apple Safari

LOW 35

An injection issue was addressed with improved validation.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.01276 Published 2024-03-08 Partial fix · 17.4, 14.4 +1 CWE-74

TI-2024-15402 CVE-2024-23297 · GHSA-ggwq-65m4-2gf3

Apple iOS and iPadOS: A malicious application may be able to access private information

LOW 25

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00281 Published 2024-03-08 Fixed in 17.4, 10.4

TI-2024-15383 CVE-2024-23278 · GHSA-vhc9-gpcr-f248

Code injection in Apple iOS and iPadOS

MEDIUM 40

The issue was addressed with improved checks.

CVSS 3.1HIGH 8.6 Local No auth User interaction EPSS 0.00494 Published 2024-03-08 Fixed in 16.7.6, 17.4 +3 CWE-94

TI-2024-00233 CVE-2024-0258 · GHSA-mwm3-q3pf-fp7v

Improper access control in Apple iOS and iPadOS

MEDIUM 45

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.6 Local No auth User interaction EPSS 0.00265 Published 2024-03-08 Fixed in 17.4, 14.4 +1 CWE-284

TI-2024-15345 CVE-2024-23239 · GHSA-9v4g-5w22-xh84

Race condition in Apple iOS and iPadOS

LOW 27

A race condition was addressed with improved state handling.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.0043 Published 2024-03-08 Fixed in 17.4, 14.4 +1 CWE-362

TI-2024-15359 CVE-2024-23254 · GHSA-62qm-vc7f-rm93

Apple Safari: A malicious website may exfiltrate audio data cross-origin

LOW 31

The issue was addressed with improved UI handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01253 Published 2024-03-08 Partial fix · 17.4, 14.4 +2

TI-2024-15341 CVE-2024-23235 · GHSA-v98w-rc85-gp5v

Information disclosure in Apple iOS and iPadOS

LOW 38

A race condition was addressed with additional validation.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00501 Published 2024-03-08 Fixed in 16.7.6, 17.4 +3 CWE-200

TI-2024-15391 CVE-2024-23286 · GHSA-6f36-v2cc-hv4m

Buffer overflow in Apple iOS and iPadOS

MEDIUM 51

A buffer overflow issue was addressed with improved memory handling.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01236 Published 2024-03-08 Fixed in 16.7.6, 17.4 +5 CWE-120

TI-2024-15395 CVE-2024-23290 · GHSA-r72f-rmc7-whwp

Insecure storage of sensitive information in Apple iOS and iPadOS

LOW 25

A logic issue was addressed with improved restrictions.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00503 Published 2024-03-08 Fixed in 17.4, 14.4 +1 CWE-922

TI-2024-15370 CVE-2024-23265 · GHSA-pw65-258f-v77h

Uncontrolled resource consumption in Apple iOS and iPadOS

MEDIUM 50

A memory corruption vulnerability was addressed with improved locking.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00715 Published 2024-03-08 Fixed in 16.7.6, 17.4 +5 CWE-400

TI-2024-15396 CVE-2024-23291 · GHSA-c534-6v46-r777

Apple iOS and iPadOS: A malicious app may be able to observe user data in log entries…

MEDIUM 40

A privacy issue was addressed with improved private data redaction for log entries.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0063 Published 2024-03-08 Fixed in 17.4, 14.4 +1

TI-2024-15392 CVE-2024-23287 · GHSA-mq4f-242h-v9hj

Apple iOS and iPadOS: An app may be able to access user-sensitive data

LOW 30

A privacy issue was addressed with improved handling of temporary files.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00669 Published 2024-03-08 Fixed in 17.4, 14.4 +1 CWE-377

TI-2024-15389 CVE-2024-23284 · GHSA-ppgm-9w39-cx97

Protection mechanism failure in Apple Safari

LOW 32

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01473 Published 2024-03-08 Partial fix · 17.4, 16.7.6 +3 CWE-693

TI-2024-15332 CVE-2024-23226 · GHSA-9hgh-cqm9-hh6h

Out-of-bounds write in Apple iOS and iPadOS

MEDIUM 42

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01188 Published 2024-03-08 Fixed in 17.4, 14.4 +2 CWE-787

TI-2024-15393 CVE-2024-23288 · GHSA-g3w4-gvhg-w64p

Apple iOS and iPadOS: An app may be able to elevate privileges

LOW 38

This issue was addressed by removing the vulnerable code.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00267 Published 2024-03-08 Fixed in 17.4, 14.4 +1 CWE-266

TI-2024-15337 CVE-2024-23231 · GHSA-mhvg-867q-v735

Apple iOS and iPadOS: An app may be able to access user-sensitive data

LOW 24

A privacy issue was addressed with improved private data redaction for log entries.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00268 Published 2024-03-08 Fixed in 16.7.6, 17.4 +3

TI-2024-15394 CVE-2024-23289 · GHSA-fvm2-fqg3-334j

Apple iOS and iPadOS: A person with physical access to a device may be able to use Siri…

LOW 25

A lock screen issue was addressed with improved state management.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00289 Published 2024-03-08 Fixed in 16.7.6, 17.4 +2

TI-2024-15356 CVE-2024-23250 · GHSA-9whp-6cg8-4p5h

Incorrect authorization in Apple iOS and iPadOS

LOW 24

An access issue was addressed with improved access restrictions.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00236 Published 2024-03-08 Fixed in 17.4, 14.4 +1 CWE-863

TI-2024-15352 CVE-2024-23246 · GHSA-r389-8fhp-frgf

Improper input validation in Apple iOS and iPadOS

MEDIUM 40

This issue was addressed by removing the vulnerable code.

CVSS 3.1HIGH 8.6 Local No auth User interaction EPSS 0.00691 Published 2024-03-08 Fixed in 16.7.6, 17.4 +3 CWE-20

TI-2024-15398 CVE-2024-23293 · GHSA-2vf8-hmhp-gw9x

Apple iOS and iPadOS: An attacker with physical access may be able to use Siri to access…

LOW 21

This issue was addressed through improved state management.

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.0041 Published 2024-03-08 Fixed in 17.4, 14.4 +1

Vulnerabilities

Filters