Design/Logic Flaw

The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7, iOS 16.7 and iPadOS 16.7, iOS 17 and iPadOS 17, macOS Sonoma 14, macOS Ventura 13.6. An app may be able to access protected user data...

Code injection

The issue was addressed with improved validation of environment variables. This issue is fixed in iOS 16.6 and iPadOS 16.6. An app may be able to access sensitive user data...

Design/Logic Flaw

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. An app may be able to access protected user data...

Code injection

The issue was addressed with improved handling of caches. This issue is fixed in macOS Ventura 13. An app may be able to access user-sensitive data...

CVE-2023-40394

The issue was addressed with improved validation of environment variables. This issue is fixed in iOS 16.6 and iPadOS 16.6. An app may be able to access sensitive user data...

CVE-2023-40394

CVE-2023-40394 affects Apple iOS and iPadOS; the issue arises from improper validation of environment variables and is fixed in iOS 16.6 and iPadOS 16.6. Reports in multiple feeds (NVD, Red Hat, CVE lists) concur that an app may access sensitive user data due to this validation flaw. The connecte...

CVE-2023-40394

The issue was addressed with improved validation of environment variables. This issue is fixed in iOS 16.6 and iPadOS 16.6. An app may be able to access sensitive user data...

CVE-2023-42872

The issue was addressed with additional permissions checks. This issue is fixed in macOS Sonoma 14, iOS 17 and iPadOS 17. An app may be able to access sensitive user data...

CVE-2023-42872

CVE-2023-42872 is an Apple security issue where an app may access sensitive user data due to insufficient permissions checks in the AppleMobileFileIntegrity component. The vulnerability is tied to macOS, iOS, and iPadOS and is fixed in macOS Sonoma 14, iOS 17, and iPadOS 17. Public documentation ...

CVE-2023-38612

The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7, iOS 16.7 and iPadOS 16.7, iOS 17 and iPadOS 17, macOS Sonoma 14, macOS Ventura 13.6. An app may be able to access protected user data...

CVE-2023-38612

CVE-2023-38612 affects Apple platforms where an app may access protected user data due to insufficient checks. The vulnerability is addressed by updates: macOS Monterey 12.7, macOS Ventura 13.6, macOS Sonoma 14, iOS 16.7/iPadOS 16.7, and iOS 17/iPadOS 17. The issue was mitigated by improved check...

CVE-2023-40383

The issue CVE-2023-40383 affects macOS Ventura versions prior to 13.3 and is described as a path handling issue that was fixed with improved validation. The vulnerability could allow an app to access user-sensitive data. Apple’s advisory (HT213670) notes the fix is in macOS Ventura 13.3. In pract...

CVE-2022-48504

CVE-2022-48504 concerns macOS Find My data access where an app may access user-sensitive data due to a vulnerability in cache handling. The issue is fixed in macOS Ventura 13, per Apple’s security content (HT213488) and multiple security trackers citing “improved handling of caches.” The vulnerab...

CVE-2023-28197

CVE-2023-28197 is an Apple macOS vulnerability described as an access issue that could allow an app to access user‑sensitive data. The issue is addressed by sandbox/security restrictions and is fixed in macOS updates: Ventura 13.3, Big Sur 11.7.5, and Monterey 12.6.4. The NVD and Red Hat entries ...

CVE-2023-42929

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. An app may be able to access protected user data...

CVE-2023-41987

This issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. An app may be able to access sensitive user data...

CVE-2022-48577

CVE-2022-48577 is an Apple macOS Ventura 13 local access issue in the APFS component where an app may access user‑sensitive data due to improved access restrictions. The vulnerability allows a local attacker with low complexity and no privileges to access sensitive data after user interaction. It...

CVE-2023-41987

The CVE-2023-41987 entry concerns a macOS Sonoma 14 vulnerability where an app may access sensitive user data due to insufficient checks. The connected sources (NVD/Red Hat/PRION/CVL) confirm that Apple resolved the issue in macOS Sonoma 14 with a patch that improves checks, addressing a data-acc...

CVE-2023-41987

This issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. An app may be able to access sensitive user data...

CVE-2023-48257

The vulnerability allows a remote attacker to access sensitive data inside exported packages or obtain up to Remote Code Execution RCE with root privileges on the device. The vulnerability can be exploited directly by authenticated users, via crafted HTTP requests, or indirectly by unauthenticate...