CVE-2023-23502

An information disclosure issue was addressed by removing the vulnerable code. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3, tvOS 16.3, watchOS 9.3. An app may be able to determine kernel memory layout...

CVE-2023-23496

CVE-2023-23496 affects Apple Safari/WebKit components; exploitation arises from processing maliciously crafted web content, leading to arbitrary code execution. Publicly documented impact includes macOS Ventura 13.2, macOS Monterey Big Sur/Big Sur? /, iOS 15.7.2 / 16.3, iPadOS 15.7.2 / 16.3, watc...

CVE-2022-32830

An out-of-bounds read issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.6, iOS 15.6 and iPadOS 15.6. Processing a maliciously crafted image may lead to disclosure of user information...

CVE-2023-23512

The issue was addressed with improved handling of caches. This issue is fixed in watchOS 9.3, tvOS 16.3, macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3. Visiting a website may lead to an app denial-of-service...

CVE-2022-32949

CVE-2022-32949 : Apple lists this as an issue affecting iOS/iPadOS with the impact that an app may be able to execute arbitrary code with kernel privileges. The Apple security content for iOS 15.7.1 / iPadOS 15.7.1 (and tvOS 16) states the issue is fixed by updated checks and memory handling. The...

CVE-2023-23512

CVE-2023-23512 affects Apple operating systems and is fixed by updates to: watchOS 9.3, tvOS 16.3, macOS Ventura 13.2, iOS 16.3, and iPadOS 16.3. The issue stems from improper cache handling and can cause an application denial-of-service when visiting a website. Affected components are not detail...

CVE-2022-32824

The CVE-2022-32824 entry describes a kernel memory disclosure vulnerability. Affected Apple platforms include tvOS, iOS, iPadOS, and watchOS; the issue stems from memory handling weaknesses that could allow an app to disclose kernel memory. Apple lists fixes in tvOS 15.6, iOS 15.6, iPadOS 15.6, a...

CVE-2023-23530

CVE-2023-23530 relates to an Apple memory handling issue that could allow an app to execute arbitrary code outside its sandbox or with elevated privileges. The vulnerability is addressed in macOS Ventura 13.2, iOS 16.3, and iPadOS 16.3, indicating an Apple memory-management fault in the affected ...

CVE-2022-32844

CVE-2022-32844 describes a race condition (kernel-level logic issue) that could allow an app with arbitrary kernel read/write to bypass Pointer Authentication. Apple fixed this in tvOS 15.6, iOS 15.6, iPadOS 15.6 and watchOS 8.7 by enhancing state handling and memory checks. Connected sources con...

CVE-2022-32855

CVE-2022-32855 is an Apple vulnerability affecting the iOS/iPadOS Home component, caused by a logic issue in state management that could allow a user to view restricted content from the lock screen. Apple fixed this with iOS 15.6 and iPadOS 15.6. The CVE is documented across multiple feeds (NVD, ...

CVE-2023-23531

CVE-2023-23531 affects Apple platforms (macOS Ventura 13.2, iOS 16.3, iPadOS 16.3) and was caused by memory-handling issues that could let an app execute arbitrary code in its sandbox or with elevated privileges. Apple indicates the issue is fixed in the listed updates. Any exploitation requires ...

CVE-2022-22668

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 15.4 and iPadOS 15.4, macOS Monterey 12.3. A malicious application may be able to leak sensitive user information...

CVE-2023-23500

CVE-2023-23500 is a memory-handling issue in Apple operating systems that could allow an app to leak sensitive kernel state. The vulnerability is addressed in macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3, and in older releases iOS 15.7.3/iPadOS 15.7.3, tvOS 16.3, and watchOS 9.3. Connected source...

Apple Warns of 3 New Vulnerabilities Affecting iPhone, iPad, and Mac Devices

Apple has revised the security advisories it released last month to include three new vulnerabilities impacting iOS, iPadOS, and macOS. The first flaw is a race condition in the Crash Reporter component CVE-2023-23520 that could enable a malicious actor to read arbitrary files as root. The iPhone...

SUSE CVE-2019-8846

A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 13.3, iCloud for Windows 10.9, iOS 13.3 and iPadOS 13.3, Safari 13.0.4, iTunes 12.10.3 for Windows, iCloud for Windows 7.16. Processing maliciously crafted web content may lead to arbitrary code...

SUSE CVE-2020-3894

A race condition was addressed with additional validation. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. An application may be able to read restricted memory...

SUSE CVE-2020-9770

A logic issue was addressed with improved state management. This issue is fixed in iOS 13.4 and iPadOS 13.4. An attacker in a privileged network position may be able to intercept Bluetooth traffic...

SUSE CVE-2021-1799

A port redirection issue was addressed with additional port validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4, Safari 14.0.3. A malicious website may be able to access...

SUSE CVE-2021-1817

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. Processing maliciously crafted web content may lead to arbitrary code execution...

SUSE CVE-2021-30661

A use after free issue was addressed with improved memory management. This issue is fixed in Safari 14.1, iOS 12.5.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report...