PT-2023-28642 · Apple · Macos Sonoma +3

Name of the Vulnerable Software and Affected Versions: macOS Sonoma versions prior to 14.2 iOS versions prior to 17.2 iPadOS versions prior to 17.2 watchOS versions prior to 10.2 Description: A privacy issue was addressed with improved private data redaction for log entries. This issue may allow ...

PT-2023-8681 · Apple · Macos Monterey +7

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.7.5 and 17.2 iPadOS versions prior to 16.7.5 and 17.2 watchOS versions prior to 10.2 macOS Ventura versions prior to 13.6.4 macOS Sonoma versions prior to 14.2 macOS Monterey versions prior to 12.7.3 Description: The...

The vulnerability of the web page rendering module in WebKit operating systems for iOS, tvOS, iPadOS, MacOS, and watchOS allows attackers to execute arbitrary code.

The vulnerability of the web page rendering module in WebKit operating systems for iOS, tvOS, iPadOS, MacOS, and watchOS is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the kernel of operating systems such as watchOS, iPadOS, iOS, and macOS lies in the operation of operations beyond buffer boundaries in memory, allowing attackers to execute arbitrary code.

The vulnerability of the kernel of watchOS, iPadOS, and iOS lies in the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the web page rendering modules in Safari’s WebKit browser for iOS, watchOS, tvOS, iPadOS operating systems allows a hacker to execute arbitrary code.

The vulnerability of the web page rendering modules in WebKit of Safari browsers for iOS, watchOS, tvOS, and iPadOS stems from insufficient input validation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2023-42846

This issue was addressed by removing the vulnerable code. This issue is fixed in watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, tvOS 17.1, iOS 17.1 and iPadOS 17.1. A device may be passively tracked by its Wi-Fi MAC address...

PT-2023-28613 · Apple · Ipados +5

Name of the Vulnerable Software and Affected Versions: Apple tvOS versions prior to 17.1 Apple watchOS versions prior to 10.1 Apple macOS Sonoma versions prior to 14.1 Apple iOS versions prior to 17.1 Apple iPadOS versions prior to 17.1 Description: The issue allows an app to access sensitive use...

PT-2023-8360 · Apple · Macos Monterey +6

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 17.1 iPadOS versions prior to 17.1 macOS Monterey versions prior to 12.7.1 watchOS versions prior to 10.1 iOS versions prior to 16.7.2 iPadOS versions prior to 16.7.2 macOS Ventura versions prior to 13.6.1 macOS Sonoma...

PT-2023-6493 · Apple · Macos Sonoma +7

Name of the Vulnerable Software and Affected Versions: Safari versions prior to 17.1 iOS versions prior to 17.1 iOS versions prior to 16.7.2 iPadOS versions prior to 17.1 iPadOS versions prior to 16.7.2 watchOS versions prior to 10.1 tvOS versions prior to 17.1 macOS Sonoma versions prior to 14.1...

PT-2023-7179 · Apple · Ipados +3

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14.1 watchOS versions prior to 10.1 iOS versions prior to 16.7.2 and prior to 17.1 iPadOS versions prior to 16.7.2 and prior to 17.1 Description: This issue is related to insufficient access control in the Siri persona...

PT-2023-27440 · Apple · Ipados +3

Name of the Vulnerable Software and Affected Versions: macOS Sonoma versions prior to 14.1 watchOS versions prior to 10.1 iOS versions prior to 16.7.2 and prior to 17.1 iPadOS versions prior to 16.7.2 and prior to 17.1 Description: An inconsistent user interface issue was addressed with improved...

The vulnerability of the Simulator component for operating systems such as watchOS, tvOS, iPadOS, and iOS allows attackers to escalate their privileges.

The vulnerability of the Simulator component for operating systems such as watchOS, tvOS, iPadOS, and iOS is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Photos storage system in operating systems such as tvOS, iOS, iPadOS, and watchOS allows attackers to gain access to photographs stored in the temporary catalog.

The vulnerability of Photos storage in operating systems such as tvOS, iOS, iPadOS, and watchOS is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain access to photos stored in the temporary catalog...

The vulnerability of the Neural Engine component in operating systems such as watchOS, iPadOS, and iOS allows attackers to gain increased privileges.

The vulnerability of the Neural Engine component in operating systems such as watchOS, iPadOS, and iOS lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow attackers to gain increased privileges...

The vulnerability of the TCC component in operating systems such as watchOS, iPadOS, macOS, and iOS allows attackers to disclose sensitive information that should be protected.

The vulnerability of the TCC component in operating systems such as watchOS, iPadOS, macOS, and iOS lies in the lack of protection for service data. Exploiting this vulnerability can allow attackers to disclose sensitive information that should be protected...

The vulnerability of the Neural Engine component in operating systems such as iPadOS, tvOS, iOS, watchOS, and macOS allows attackers to execute arbitrary code.

The vulnerability of the Neural Engine component in iPadOS, tvOS, iOS, watchOS, and macOS relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the TCC component in operating systems like watchOS and macOS allows a hacker to capture user screenshots.

The vulnerability of the TCC component in operating systems like watchOS and macOS is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to capture user screens remotely...

CVE-2023-40448

The issue was addressed with improved handling of protocols. This issue is fixed in tvOS 17, iOS 16.7 and iPadOS 16.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. A remote attacker may be able to break out of Web Content sandbox...

CVE-2023-40424

The issue was addressed with improved checks. This issue is fixed in iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. An app may be able to access user-sensitive data...

CVE-2023-35984

The issue was addressed with improved checks. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. An attacker in physical proximity can cause a limited out of bounds write...