The vulnerability of the web page rendering module in WebKit operating systems for iOS, tvOS, iPadOS, MacOS, and watchOS allows attackers to execute arbitrary code.

The vulnerability of the web page rendering module in WebKit operating systems for iOS, tvOS, iPadOS, MacOS, and watchOS is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2023-9367 · Apple +7 · Macos Sonoma +11

Name of the Vulnerable Software and Affected Versions: Safari versions prior to 17.2 iOS versions prior to 17.2 iPadOS versions prior to 17.2 macOS Sonoma versions prior to 14.2 WebKitGTK affected versions not specified WPE WebKit affected versions not specified Description: The issue is related ...

The vulnerability of the kernel of operating systems such as watchOS, iPadOS, iOS, and macOS lies in the operation of operations beyond buffer boundaries in memory, allowing attackers to execute arbitrary code.

The vulnerability of the kernel of watchOS, iPadOS, and iOS lies in the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the web page rendering modules in Safari’s WebKit browser for iOS, watchOS, tvOS, iPadOS operating systems allows a hacker to execute arbitrary code.

The vulnerability of the web page rendering modules in WebKit of Safari browsers for iOS, watchOS, tvOS, and iPadOS stems from insufficient input validation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2023-42857

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1. An app may be able to access sensitive user data...

CVE-2023-42846

This issue was addressed by removing the vulnerable code. This issue is fixed in watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, tvOS 17.1, iOS 17.1 and iPadOS 17.1. A device may be passively tracked by its Wi-Fi MAC address...

PT-2023-8360 · Apple · Macos Monterey +6

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 17.1 iPadOS versions prior to 17.1 macOS Monterey versions prior to 12.7.1 watchOS versions prior to 10.1 iOS versions prior to 16.7.2 iPadOS versions prior to 16.7.2 macOS Ventura versions prior to 13.6.1 macOS Sonoma...

PT-2023-8348 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14.1 iOS versions prior to 17.1 iPadOS versions prior to 17.1 Description: A privacy issue is related to insufficient protection of registration data in the Contacts component of iOS, macOS, and iPadOS operating system...

PT-2023-7179 · Apple · Ipados +3

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14.1 watchOS versions prior to 10.1 iOS versions prior to 16.7.2 and prior to 17.1 iPadOS versions prior to 16.7.2 and prior to 17.1 Description: This issue is related to insufficient access control in the Siri persona...

PT-2023-8355 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14.1 iOS versions prior to 17.1 iPadOS versions prior to 17.1 iOS versions prior to 16.7.2 iPadOS versions prior to 16.7.2 macOS Ventura versions prior to 13.6.1 Description: The issue is related to improved memory...

The vulnerability of the Simulator component for operating systems such as watchOS, tvOS, iPadOS, and iOS allows attackers to escalate their privileges.

The vulnerability of the Simulator component for operating systems such as watchOS, tvOS, iPadOS, and iOS is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Photos storage system in operating systems such as tvOS, iOS, iPadOS, and watchOS allows attackers to gain access to photographs stored in the temporary catalog.

The vulnerability of Photos storage in operating systems such as tvOS, iOS, iPadOS, and watchOS is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain access to photos stored in the temporary catalog...

The vulnerability of the TCC component in operating systems such as watchOS, iPadOS, macOS, and iOS allows attackers to disclose sensitive information that should be protected.

The vulnerability of the TCC component in operating systems such as watchOS, iPadOS, macOS, and iOS lies in the lack of protection for service data. Exploiting this vulnerability can allow attackers to disclose sensitive information that should be protected...

The vulnerability of the Neural Engine component in operating systems such as watchOS, iPadOS, and iOS allows attackers to gain increased privileges.

The vulnerability of the Neural Engine component in operating systems such as watchOS, iPadOS, and iOS lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow attackers to gain increased privileges...

The vulnerability of the Messages component in operating systems iPadOS and iOS allows a hacker to send a text message from an additional eSIM card.

The vulnerability of the Messages component in iPadOS and iOS operating systems is related to state management errors. Exploiting this vulnerability allows a malicious actor to send text messages from an additional eSIM card remotely...

The vulnerability of the Neural Engine component in operating systems such as iPadOS, tvOS, iOS, watchOS, and macOS allows attackers to execute arbitrary code.

The vulnerability of the Neural Engine component in iPadOS, tvOS, iOS, watchOS, and macOS relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Pro Res component in operating systems such as iPadOS, iOS, macOS, and tvOS allows a hacker to execute arbitrary code.

The vulnerability of the Pro Res component in operating systems such as iPadOS, iOS, macOS, and tvOS relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2023-40424

The issue was addressed with improved checks. This issue is fixed in iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. An app may be able to access user-sensitive data...

CVE-2023-35984

The issue was addressed with improved checks. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. An attacker in physical proximity can cause a limited out of bounds write...

Apple iOS and iPadOS Security Vulnerabilities

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS 17 and iPadOS 17, which originates from an application that may be able to...