Code injection

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1. An app may be able to access sensitive user data...

Code injection

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1. An app may be able to access sensitive user data...

Design/Logic Flaw

The issue was addressed with improved permissions logic. This issue is fixed in macOS Sonoma 14.1. An app may be able to access sensitive user data...

CVE-2023-42844

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, macOS Ventura 13.6.1. A website may be able to access sensitive user data when resolving symlinks...

CVE-2023-42842

CVE-2023-42842 affects macOS Sonoma 14.1. The Nessus/OpenVAS data and NVD entry indicate the issue is fixed in macOS Sonoma 14.1 and that an app may be able to access sensitive user data. The CVSS v3.1 vector (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) assigns a base score of 5.5 (Medium) with Local at...

CVE-2023-40444

CVE-2023-40444 affects macOS Sonoma 14.1, addressing a permissions flaw that could allow an app to access user-sensitive data. The fix is included in macOS Sonoma 14.1; the provided documents do not specify other affected versions or exploit details. Recommendation: update to macOS Sonoma 14.1 or...

CVE-2023-40444

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.1. An app may be able to access user-sensitive data...

CVE-2023-41077

An app may be able to access protected user data. This issue is fixed in macOS Sonoma 14, macOS Ventura 13.6.1. The issue was addressed with improved checks...

CVE-2023-41077

An app may be able to access protected user data. This issue is fixed in macOS Sonoma 14, macOS Ventura 13.6.1. The issue was addressed with improved checks...

CVE-2023-41077

The CVE-2023-41077 entry affects macOS, with the explicit issue described as: "An app may be able to access protected user data". Connected sources confirm the vulnerable component as part of macOS imaging/handling stack (as noted in the context of ImageIO and related Apple advisories) and state ...

CVE-2023-41997

CVE-2023-41997 affects Apple platforms where the issue is mitigated by code changes that restrict options on a locked device to prevent Siri from leaking data. The public description confirms vulnerable behavior: an attacker with physical access could use Siri to access sensitive user data. The f...

CVE-2023-42850

The issue was addressed with improved permissions logic. This issue is fixed in macOS Sonoma 14.1. An app may be able to access sensitive user data...

CVE-2023-40421

CVE-2023-40421 is a macOS permission issue affecting macOS Sonoma 14.1, macOS Monterey 12.7.1, and macOS Ventura 13.6.1 where an app may access sensitive user data. The vulnerability is mitigated by OS updates; Apple lists the fixes under the indicated Sonoma/Monterey/Ventura versions. The connec...

CVE-2023-40421

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, macOS Ventura 13.6.1. An app may be able to access sensitive user data...

CVE-2023-40421

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, macOS Ventura 13.6.1. An app may be able to access sensitive user data...

Apple macOS Security Breach

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Sonoma version 14.1, which originates from the fact that an attacker with physical access rights may be able to use Siri to access sensitive user data...

PT-2023-28610 · Apple · Macos Sonoma +1

Name of the Vulnerable Software and Affected Versions: macOS Sonoma versions prior to 14.1 Description: A logic issue was addressed with improved checks, which may have allowed an attacker to access user data. Recommendations: For macOS Sonoma versions prior to 14.1, update to version 14.1 to...

About the security content of watchOS 10.1

About the security content of watchOS 10.1 This document describes the security content of watchOS 10.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are availabl...

PT-2023-8352 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14.1 Description: The issue is related to insufficient access control in the LaunchServices component of the macOS operating system, which may allow an app to access sensitive user data. The issue was addressed with...

Apple macOS Security Breach

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Ventura version 13.6.1, which stems from an application that may be able to access protected user data...