CVE-2023-41068

CVE-2023-41068 concerns an access control flaw in the MobileStorageMounter component of Apple’s operating systems. The issue may allow a user to elevate privileges. It affects tvOS, iOS, iPadOS, and watchOS prior to the fixed releases. Remediation is to update to: tvOS 17, iOS 17, iPadOS 17, watc...

CVE-2023-41068

An access issue was addressed with improved access restrictions. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, iOS 16.7 and iPadOS 16.7. A user may be able to elevate privileges...

CVE-2023-40403

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may disclose sensitive information...

CVE-2023-40403

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may disclose sensitive information...

CVE-2023-40403

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may disclose sensitive information...

CVE-2023-40403

CVE-2023-40403 involves libxslt and is described as an information disclosure through processing web content, mitigated by improved memory handling. The initial entry states fixes in macOS Ventura 13.6, tvOS 17, iOS 16.7/iPadOS 16.7, iOS 17/iPadOS 17, macOS Monterey 12.7, macOS Sonoma 14, and wat...

CVE-2023-40395

The issue was addressed with improved handling of caches. This issue is fixed in tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to access contacts...

CVE-2023-41063

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to execute arbitrary code with kernel privileges...

CVE-2023-41063

CVE-2023-41063 affects Apple platforms (macOS Ventura 13.6; macOS Sonoma 14; iOS 16.7, 17; tvOS 17). Root cause: memory handling issue that may allow an app to execute arbitrary code with kernel privileges. Impact: local attacker with user interaction could gain kernel-level code execution. Fix: ...

CVE-2023-41063

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to execute arbitrary code with kernel privileges...

CVE-2023-40520

The issue was addressed with improved checks. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10. An app may be able to access edited photos saved to a temporary directory...

CVE-2023-40432

CVE-2023-40432 is associated with Apple platforms and is addressed by memory-management fixes in multiple OS updates. The connected Apple security content indicates the vulnerability could allow an app to execute arbitrary code with kernel privileges and that mitigation is via updated memory hand...

CVE-2023-40432

The issue was addressed with improved memory handling. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. An app may be able to execute arbitrary code with kernel privileges...

CVE-2023-40520

The CVE-2023-40520 issue concerns Apple platforms where an app could access edited photos saved in a temporary directory due to insufficient access control in Photos Storage. Affected products include tvOS, iOS, iPadOS (all before 17) and watchOS before 10. The underlying problem is improper acce...

CVE-2023-40520

The issue was addressed with improved checks. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10. An app may be able to access edited photos saved to a temporary directory...

CVE-2023-40432

The issue was addressed with improved memory handling. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. An app may be able to execute arbitrary code with kernel privileges...

CVE-2023-40424

The issue was addressed with improved checks. This issue is fixed in iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. An app may be able to access user-sensitive data...

CVE-2023-40424

The issue was addressed with improved checks. This issue is fixed in iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. An app may be able to access user-sensitive data...

CVE-2023-40424

CVE-2023-40424 affects Apple platforms (iOS/iPadOS/watchOS/macOS Sonoma 14) where an app may access user‑sensitive data. Connected sources show the root cause as a vulnerability in privacy/data‑exposure controls, with remediation involving improved checks in components such as TCC and AppSandbox....

CVE-2023-41995

CVE-2023-41995 describes a use-after-free vulnerability in Apple kernel components surfaced as memory-management issue. Affected products include iOS 17, iPadOS 17, and macOS Sonoma 14. The flaw may allow an app to execute arbitrary code with kernel privileges, with a local attack vector and user...