CVE-2023-38604

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in watchOS 9.6, macOS Big Sur 11.7.9, iOS 15.7.8 and iPadOS 15.7.8, macOS Monterey 12.6.8, tvOS 16.6, iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. An app may be able to execute arbitrary code with kern...

CVE-2023-38599

CVE-2023-38599 is a logic-state-management issue in WebKitGTK/WebKit components where a website may track sensitive user information. The vulnerability is addressed by updates in WebKitGTK (notably 2.40.5 series) across distributions (e.g., Debian DSA-5468-1 notes fixes for WebKitGTK with this CV...

CVE-2023-38604

The CVE-2023-38604 issue is an out-of-bounds write addressed by input validation fixes. Affected Apple platforms include watchOS 9.6; macOS Big Sur 11.7.9; macOS Monterey 12.6.8; macOS Ventura 13.5; iOS 15.7.8 / 16.6; iPadOS 15.7.8 / 16.6; tvOS 16.6. The vulnerability could allow an app to execut...

CVE-2023-38599

A logic issue was addressed with improved state management. This issue is fixed in Safari 16.6, watchOS 9.6, iOS 15.7.8 and iPadOS 15.7.8, tvOS 16.6, iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. A website may be able to track sensitive user information...

CVE-2023-38599

A logic issue was addressed with improved state management. This issue is fixed in Safari 16.6, watchOS 9.6, iOS 15.7.8 and iPadOS 15.7.8, tvOS 16.6, iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. A website may be able to track sensitive user information...

CVE-2023-38592

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 16.6 and iPadOS 16.6, watchOS 9.6, tvOS 16.6, macOS Ventura 13.5. Processing web content may lead to arbitrary code execution...

CVE-2023-36495

An integer overflow was addressed with improved input validation. This issue is fixed in watchOS 9.6, macOS Monterey 12.6.8, iOS 15.7.8 and iPadOS 15.7.8, tvOS 16.6, iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. An app may be able to execute arbitrary code with kernel privileges...

CVE-2023-36495

CVE-2023-36495 involves an integer overflow that Apple fixed by improving input validation. Affected platforms include watchOS 9.6, macOS Monterey 12.6.8, iOS 15.7.8/iPadOS 15.7.8, tvOS 16.6, iOS 16.6/iPadOS 16.6, and macOS Ventura 13.5. The issue could allow an app to execute arbitrary code with...

CVE-2023-38592

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 16.6 and iPadOS 16.6, watchOS 9.6, tvOS 16.6, macOS Ventura 13.5. Processing web content may lead to arbitrary code execution...

CVE-2023-38592

CVE-2023-38592 affects WebKitGTK/WebKit processing web content. Description indicates a logic issue that could lead to arbitrary code execution. Concrete remediation details in connected docs include distro advisories for WebKitGTK/webkit2gtk upates (e.g., Debian DSA-5468-1; Fedora/upstream packa...

CVE-2023-32445

CVE-2023-32445 is a cross-site scripting vulnerability triggered when processing a document. The issue affects Apple platforms including Safari, macOS Ventura, iOS, iPadOS, watchOS, and tvOS as listed, with exploitation potential tied to document handling. Apple states the vulnerability is resolv...

CVE-2023-32445

This issue was addressed with improved checks. This issue is fixed in Safari 16.6, watchOS 9.6, iOS 15.7.8 and iPadOS 15.7.8, tvOS 16.6, iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. Processing a document may lead to a cross site scripting attack...

CVE-2023-32445

This issue was addressed with improved checks. This issue is fixed in Safari 16.6, watchOS 9.6, iOS 15.7.8 and iPadOS 15.7.8, tvOS 16.6, iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. Processing a document may lead to a cross site scripting attack...

CVE-2023-38590

CVE-2023-38590 is a buffer‑overflow issue in Apple systems where improved memory handling fixes a vulnerability that could let a remote attacker terminate the system or corrupt kernel memory. The fix is incorporated in multiple Apple OS updates: watchOS 9.6; macOS Big Sur 11.7.9; iOS 15.7.8 and i...

CVE-2023-38590

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in watchOS 9.6, macOS Big Sur 11.7.9, iOS 15.7.8 and iPadOS 15.7.8, macOS Monterey 12.6.8, tvOS 16.6, iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. A remote user may be able to cause unexpected system...

CVE-2023-38590

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in watchOS 9.6, macOS Big Sur 11.7.9, iOS 15.7.8 and iPadOS 15.7.8, macOS Monterey 12.6.8, tvOS 16.6, iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. A remote user may be able to cause unexpected system...

CVE-2023-34425

CVE-2023-34425 involves an issue in Apple software where improved memory handling fixes allow arbitrary code execution with kernel privileges. Affected are watchOS 9.6, macOS Monterey 12.6.8, iOS 15.7.8 and iPadOS 15.7.8, macOS Big Sur 11.7.9, iOS 16.6 and iPadOS 16.6, and macOS Ventura 13.5. The...

Apple watchOS 缓冲区错误漏洞

Apple watchOS is a smartwatch operating system from Apple. A security vulnerability exists in Apple watchOS version 9.6, which originates from an application that may be able to execute arbitrary code using kernel privileges...

Apple watchOS 安全漏洞

Apple watchOS is an operating system for smartwatches from Apple. A security vulnerability exists in Apple watchOS version 9.6, which originated from a remote user could cause the system to terminate unexpectedly or corrupt kernel memory...

Apple watchOS 资源管理错误漏洞

Apple watchOS is a smartwatch operating system from Apple. A security vulnerability exists in Apple watchOS version 9.6, which originates from an application that may be able to execute arbitrary code using kernel privileges...