CVE-2023-40520

The issue was addressed with improved checks. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10. An app may be able to access edited photos saved to a temporary directory...

CVE-2023-40520

The issue was addressed with improved checks. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10. An app may be able to access edited photos saved to a temporary directory...

CVE-2023-40520

The CVE-2023-40520 issue concerns Apple platforms where an app could access edited photos saved in a temporary directory due to insufficient access control in Photos Storage. Affected products include tvOS, iOS, iPadOS (all before 17) and watchOS before 10. The underlying problem is improper acce...

CVE-2023-40424

The issue was addressed with improved checks. This issue is fixed in iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. An app may be able to access user-sensitive data...

CVE-2023-40424

CVE-2023-40424 affects Apple platforms (iOS/iPadOS/watchOS/macOS Sonoma 14) where an app may access user‑sensitive data. Connected sources show the root cause as a vulnerability in privacy/data‑exposure controls, with remediation involving improved checks in components such as TCC and AppSandbox....

CVE-2023-40424

The issue was addressed with improved checks. This issue is fixed in iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. An app may be able to access user-sensitive data...

CVE-2023-40412

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17. An app may be able to execute arbitrary code with kernel privileges...

CVE-2023-40412

CVE-2023-40412 affects Apple platforms and was fixed by memory-handling improvements. The issue could allow an app to execute arbitrary code with kernel privileges. Affected items include macOS Ventura 13.6, macOS Monterey 12.7, iOS 17, iPadOS 17, tvOS 17, and watchOS 10. The connected documents ...

CVE-2023-35990

The issue was addressed with improved checks. This issue is fixed in iOS 17 and iPadOS 17, watchOS 10, iOS 16.7 and iPadOS 16.7, macOS Sonoma 14. An app may be able to identify what other apps a user has installed...

CVE-2023-35990

The issue was addressed with improved checks. This issue is fixed in iOS 17 and iPadOS 17, watchOS 10, iOS 16.7 and iPadOS 16.7, macOS Sonoma 14. An app may be able to identify what other apps a user has installed...

CVE-2023-35990

CVE-2023-35990 affects Apple platforms (iOS, iPadOS, watchOS, macOS Sonoma) where an app could determine which other apps are installed on the device. The issue is mitigated by Apple’s fixes in iOS 17/iPadOS 17, watchOS 10, iOS 16.7/iPadOS 16.7, and macOS Sonoma 14. The root cause is linked to in...

CVE-2023-39434

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. Processing web content may lead to arbitrary code execution...

CVE-2023-39434

CVE-2023-39434 is described in connected documents as a use-after-free vulnerability in processing web content that can lead to arbitrary code execution. The issue is associated with WebKit/WebKitGTK ecosystem and is addressed in Apple platforms (iOS 17/iPadOS 17/watchOS 10/macOS Sonoma 14) per t...

CVE-2023-40429

A permissions issue was addressed with improved validation. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. An app may be able to access sensitive user data...

CVE-2023-40429

CVE-2023-40429 is an Apple permission-issue vulnerability addressed by improved input/permissions validation. Affected products include tvOS 17, iOS 17, iPadOS 17, watchOS 10, and macOS Sonoma 14. The issue could allow an app to access sensitive user data. The fix is included in the listed OS upd...

CVE-2023-40429

A permissions issue was addressed with improved validation. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. An app may be able to access sensitive user data...

CVE-2023-39434

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. Processing web content may lead to arbitrary code execution...

CVE-2023-40452

The issue was addressed with improved bounds checks. This issue is fixed in macOS Ventura 13.6, tvOS 17, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to overwrite arbitrary files...

CVE-2023-40452

The issue was addressed with improved bounds checks. This issue is fixed in macOS Ventura 13.6, tvOS 17, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to overwrite arbitrary files...

CVE-2023-40452

CVE-2023-40452 affects multiple Apple platforms (macOS Ventura 13.6, macOS Monterey 12.7, macOS Sonoma 14, iOS/iPadOS 17, tvOS 17, watchOS 10). The root cause is improved bounds checks, and the issue allows an app to overwrite arbitrary files. The vulnerability is fixed in the listed OS versions;...