PT-2024-19776 · Apple · Macos Sonoma +4

Name of the Vulnerable Software and Affected Versions: macOS Sonoma versions prior to 14.5 watchOS versions prior to 10.5 iOS versions prior to 17.5 and 16.7.8 iPadOS versions prior to 17.5 and 16.7.8 Description: A maliciously crafted email may be able to initiate FaceTime calls without user...

Apple Released Security Updates for Multiple Products

Apple released security updates to address vulnerabilities in Safari, macOS, watchOS, tvOS, and visionOS. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following advisories and apply t...

CVE-2024-23289

A lock screen issue was addressed with improved state management. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, watchOS 10.4. A person with physical access to a device may be able to use Siri to access private calendar information...

PT-2024-2162 · Apple · Macos Sonoma +7

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.7.4 macOS Ventura versions prior to 13.6.5 macOS Sonoma versions prior to 14.4 visionOS versions prior to 1.1 iOS versions prior to 17.4 iPadOS versions prior to 17.4 watchOS versions prior to 10.4 iOS versions prio...

PT-2024-19759

Name of the Vulnerable Software and Affected Versions macOS versions 12.7.4 through 14.4 visionOS version 1.1 iOS versions 16.7.6, 17.4 iPadOS versions 16.7.6, 17.4 watchOS version 10.4 tvOS version 17.4 Description A memory corruption issue was addressed through improved locking mechanisms. The...

PT-2023-8688 · Apple · Macos Sonoma +6

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 17 Apple iPadOS versions prior to 17 Apple tvOS versions prior to 17 Apple watchOS versions prior to 10 Apple macOS Sonoma versions prior to 14 Apple macOS Ventura versions prior to 13.6.4 Description: The issue is...

PT-2023-6030 · Apple · Ios +3

Name of the Vulnerable Software and Affected Versions: tvOS versions prior to 17 iOS versions prior to 17 iPadOS versions prior to 17 watchOS versions prior to 10 Description: The issue is related to inadequate access control in the Photos Storage of the operating systems, which may allow an app ...

PT-2023-5472

Name of the Vulnerable Software and Affected Versions iOS versions prior to 16.7 iPadOS versions prior to 16.7 macOS Ventura versions prior to 13.6 watchOS versions prior to 9.6.3 watchOS versions prior to 10.0.1 Description A certificate validation issue was addressed, which may allow a maliciou...

PT-2023-4038 · Apple · Macos Ventura +6

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.6.8 macOS Big Sur versions prior to 11.7.9 macOS Ventura versions prior to 13.5 iOS versions prior to 16.6 iPadOS versions prior to 16.6 tvOS versions prior to 16.6 watchOS versions prior to 9.6 Description: A...

PT-2023-5813 · Apple +8 · Webkitgtk +15

Name of the Vulnerable Software and Affected Versions: WebKitGTK versions prior to the fixed version WPE WebKit versions prior to the fixed version iOS versions prior to 16.6 iPadOS versions prior to 16.6 watchOS versions prior to 9.6 tvOS versions prior to 16.6 macOS Ventura versions prior to 13...

PT-2023-4201 · Apple +8 · Macos Ventura +14

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.6 iPadOS versions prior to 16.6 tvOS versions prior to 16.6 macOS Ventura versions prior to 13.5 Safari versions prior to 16.6 watchOS versions prior to 9.6 Description: The issue is related to processing web content...

CVE-2023-32388

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in watchOS 9.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. An app may be able to bypass Privacy preferences...

PT-2023-2893 · Apple · Macos Monterey +8

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 9.5 tvOS versions prior to 16.5 macOS Ventura versions prior to 13.4 iOS versions prior to 15.7.6 and prior to 16.5 iPadOS versions prior to 15.7.6 and prior to 16.5 macOS Big Sur versions prior to 11.7.7 macOS...

PT-2023-2903

Name of the Vulnerable Software and Affected Versions Apple WebKit versions prior to watchOS 9.5 Apple WebKit versions prior to tvOS 16.5 Apple WebKit versions prior to macOS Ventura 13.4 Apple WebKit versions prior to iOS 15.7.6 Apple WebKit versions prior to iPadOS 15.7.6 Apple WebKit versions...

CVE-2023-23537

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, watchOS 9.4, macOS Big Sur 11.7.5. An app may be able to read sensitive location information...

CVE-2023-23536

The issue was addressed with improved bounds checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Big Sur 11.7.5, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. An app may be able to execute arbitrary code with kernel privileges...

CVE-2023-27932

This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, tvOS 16.4, watchOS 9.4. Processing maliciously crafted web content may bypass Same Origin Policy...

SUSE CVE-2023-27954

The issue was addressed by removing origin information. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, tvOS 16.4, watchOS 9.4. A website may be able to track sensitive user information...

PT-2022-27956 · Apple · Ios +3

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.2 iPadOS versions prior to 16.2 iOS versions prior to 15.7.2 iPadOS versions prior to 15.7.2 tvOS versions prior to 16.2 watchOS versions prior to 9.2 Description: An out-of-bounds write issue was addressed with...

CVE-2022-32817

An out-of-bounds read issue was addressed with improved bounds checking. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. An app may be able to disclose kernel memory...