CVE-2023-42857

CVE-2023-42857 describes a privacy issue where private data redaction for log entries was improved. Affected platforms: macOS Sonoma 14.1, iOS 17.1, and iPadOS 17.1. Root cause: leakage of sensitive user data through logs due to insufficient redaction. Impact: an app may be able to access sensiti...

CVE-2023-42857

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1. An app may be able to access sensitive user data...

CVE-2023-42846

This issue was addressed by removing the vulnerable code. This issue is fixed in watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, tvOS 17.1, iOS 17.1 and iPadOS 17.1. A device may be passively tracked by its Wi-Fi MAC address...

CVE-2023-42846

CVE-2023-42846 relates to a vulnerability in Apple devices where the mDNSResponder component could allow passive tracking of a device by its Wi-Fi MAC address. The issue was mitigated by removing the vulnerable code and is fixed in watchOS 10.1, iOS 16.7.2 / iPadOS 16.7.2, tvOS 17.1, and iOS 17.1...

CVE-2023-40416

The issue was addressed with improved memory handling. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS Monterey 12.7.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Ventura 13.6.1, macOS Sonoma 14.1. Processing an image may result in disclosure of process memory...

CVE-2023-40416

The issue was addressed with improved memory handling. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS Monterey 12.7.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Ventura 13.6.1, macOS Sonoma 14.1. Processing an image may result in disclosure of process memory...

CVE-2023-40416

CVE-2023-40416 affects Apple ImageIO: processing an image may disclose process memory. Fixed in iOS 17.1 / iPadOS 17.1, macOS Monterey 12.7.1, iOS 16.7.2 / iPadOS 16.7.2, macOS Ventura 13.6.1, macOS Sonoma 14.1. The Nessus/OpenVAS entries corroborate the vulnerability family (memory disclosure vi...

CVE-2023-32359

CVE-2023-32359 is a WebKitGTK/WebKitGTK+-related vulnerability where a user password may be read aloud by a text-to-speech accessibility feature. The initial CVE entry notes a fix in iOS 16.7.2 and iPadOS 16.7.2. Connected advisories ( MiracleLinux, TencentOS Server, Alibaba Cloud Linux, Rocky Li...

CVE-2023-42847

A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1. An attacker may be able to access passkeys without authentication...

CVE-2023-42847

CVE-2023-42847 is a logic-issue vulnerability fixed by Apple in macOS Sonoma 14.1, iOS 17.1, and iPadOS 17.1. The issue allowed access to passkeys without authentication due to insufficient checks. Affected products: macOS Sonoma 14.1+, iOS 17.1, iPadOS 17.1. Impact, as stated: an attacker may ac...

CVE-2023-42847

A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1. An attacker may be able to access passkeys without authentication...

PT-2023-7014 · Apple · Ipados +3

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14.1 watchOS versions prior to 10.1 iOS versions prior to 16.7.2 and 17.1 iPadOS versions prior to 16.7.2 and 17.1 Description: The issue is related to insufficient access control in the Siri personal assistant, which...

PT-2023-6513 · Apple · Macos Monterey +6

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 10.1 iPadOS versions prior to 17.1 iOS versions prior to 17.1 macOS Monterey versions prior to 12.7.1 macOS Ventura versions prior to 13.6.1 macOS Sonoma versions prior to 14.1 iOS versions prior to 16.7.2 iPadOS...

PT-2023-28616 · Apple · Macos Sonoma +6

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 10.1 macOS Sonoma versions prior to 14.1 tvOS versions prior to 17.1 iOS versions prior to 16.7.2 and prior to 17.1 iPadOS versions prior to 16.7.2 and prior to 17.1 macOS Ventura versions prior to 13.6.1 Description...

Apple iOS and Apple iPadOS Security Vulnerabilities

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS version 17.1 and iPadOS version 17.1, which originates from a device that can...

About the security content of iOS 16.7.2 and iPadOS 16.7.2

About the security content of iOS 16.7.2 and iPadOS 16.7.2 This document describes the security content of iOS 16.7.2 and iPadOS 16.7.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...

PT-2023-7177 · Apple · Macos Sonoma +5

Name of the Vulnerable Software and Affected Versions: macOS Sonoma versions prior to 14.1 watchOS versions prior to 10.1 iOS versions prior to 17.1 iPadOS versions prior to 17.1 Description: The issue is related to insufficient access control in the Siri personal assistant, which may allow an...

PT-2023-28623 · Apple · Ios +3

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14.1 tvOS versions prior to 17.1 macOS Monterey versions prior to 12.7.1 iOS versions prior to 16.7.2 iPadOS versions prior to 16.7.2 iOS versions prior to 17.1 iPadOS versions prior to 17.1 macOS Ventura versions prio...

PT-2023-28655 · Apple · Macos Monterey +5

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 17.1 iPadOS versions prior to 17.1 macOS Ventura versions prior to 13.6.3 macOS Sonoma versions prior to 14.1 macOS Monterey versions prior to 12.7.1 Description: The issue was addressed with improved checks. An app with...

About the security content of iOS 15.8 and iPadOS 15.8

About the security content of iOS 15.8 and iPadOS 15.8 This document describes the security content of iOS 15.8 and iPadOS 15.8. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...