CVE-2022-32885

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5, Safari 15.6. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2023-27933

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. An app with root privileges may be able to execute arbitrary code with kernel privileges...

CVE-2023-27942

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Big Sur 11.7.5, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. An app may be able to access user-sensitive data...

CVE-2023-27956

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, tvOS 16.4, watchOS 9.4. Processing a maliciously crafted image may result in disclosure of process memory...

CVE-2023-23526

This was addressed with additional checks by Gatekeeper on files downloaded from an iCloud shared-by-me folder. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4. A file from an iCloud shared-by-me folder may be able to bypass Gatekeeper...

CVE-2023-27961

Multiple validation issues were addressed with improved input sanitization. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, watchOS 9.4, macOS Big Sur 11.7.5. Importing a maliciously crafted calendar invitation may exfiltra...

CVE-2023-27928

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, tvOS 16.4, watchOS 9.4, macOS Big Sur 11.7.5. An app may be able to access information about a user’s contacts...

CVE-2023-23541

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 15.7.4 and iPadOS 15.7.4, iOS 16.4 and iPadOS 16.4. An app may be able to access information about a user’s contacts...

CVE-2023-28200

A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Ventura 13.3, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. An app may be able to disclose kernel memory...

CVE-2023-23537

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, watchOS 9.4, macOS Big Sur 11.7.5. An app may be able to read sensitive location information...

CVE-2023-27949

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, iOS 15.7.4 and iPadOS 15.7.4. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution...

CVE-2023-28178

A logic issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. An app may be able to bypass Privacy preferences...

CVE-2023-28194

The CVE-2023-28194 issue pertains to Apple iOS/iPadOS where an app may be able to unexpectedly create a bookmark on the Home Screen via Safari/WebKit handling. The connected documents indicate a vulnerability in Safari (CVE-2023-28194) with the root cause described as issues addressed by improved...

CVE-2023-23525

CVE-2023-23525 is an Apple vulnerability describing a local privilege-escalation where an app may gain root privileges. Public records indicate fixes in macOS Ventura 13.3, iOS 16.4, iPadOS 16.4, and macOS Big Sur 11.7.5. The provided documents list these OS versions as the affected and patched t...

CVE-2023-27936

CVE-2023-27936 is an out-of-bounds write vulnerability in Apple OS components where insufficient input validation can lead to an app causing unexpected system termination or writes to kernel memory. Affected: macOS Big Sur 11.7.5, macOS Monterey 12.6.4, macOS Ventura 13.3, and iOS/iPadOS 15.7.4. ...

CVE-2023-23541

CVE-2023-23541 affects Apple iOS/iPadOS. A privacy issue could allow an app to access information about a user’s contacts due to insufficient private data redaction in log entries. The issue is fixed in iOS 15.7.4 / iPadOS 15.7.4 and in iOS 16.4 / iPadOS 16.4. Affected components are tied to log-...

CVE-2023-23537

CVE-2023-23537 affects Apple platforms via a privacy issue where log entries could reveal sensitive location data. The vulnerability is fixed by Apple in: macOS Ventura 13.3, iOS 16.4/iPadOS 16.4, iOS 15.7.4/iPadOS 15.7.4, watchOS 9.4, and macOS Big Sur 11.7.5. Root cause (as described) is improv...

CVE-2023-27929

Summary of CVE-2023-27929 : The vulnerability is an out-of-bounds read fixed by earlier input validation updates. Affected Apple platforms include macOS Ventura 13.3; tvOS 16.4; iOS 16.4; iPadOS 16.4; and watchOS 9.4. Impact is memory disclosure potential when processing a maliciously crafted ima...

CVE-2023-27949

CVE-2023-27949 describes an out-of-bounds read that was mitigated by improved input validation. Affected platforms include macOS Ventura 13.3, macOS Monterey 12.6.4, iOS 15.7.4 and iPadOS 15.7.4; processing a maliciously crafted file may terminate the app or execute arbitrary code. The connected ...

CVE-2023-27941

CVE-2023-27941 describes a validation issue addressed by improved input sanitization, with a fix released across multiple Apple platforms: macOS Big Sur 11.7.5, macOS Monterey 12.6.4, macOS Ventura 13.3, iOS 15.7.4, and iPadOS 15.7.4. The issue could allow an app to disclose kernel memory. The pr...