PT-2023-23758 · Apple · Ipados +5

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.5 iPadOS versions prior to 16.5 watchOS versions prior to 9.5 tvOS versions prior to 16.5 macOS Ventura versions prior to 13.4 Description: The issue allows an app to modify protected parts of the file system. This wa...

PT-2023-3636 · Apple · Macos Ventura +5

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.5 iPadOS versions prior to 16.5 watchOS versions prior to 9.5 tvOS versions prior to 16.5 macOS Ventura versions prior to 13.4 Description: A type confusion issue was addressed with improved checks, which may allow an...

PT-2023-8412 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.4 iOS versions prior to 16.5 iPadOS versions prior to 16.5 libxml2 affected versions not specified Description: The issue is related to multiple memory corruption problems, including a buffer overflow in the libxml2...

PT-2023-23766 · Apple · Macos Monterey +6

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 9.5 macOS Ventura versions prior to 13.4 iOS versions prior to 15.7.6 and prior to 16.5 iPadOS versions prior to 15.7.6 and prior to 16.5 macOS Big Sur versions prior to 11.7.7 macOS Monterey versions prior to 12.6.6...

PT-2023-2896 · Apple · Ipados +7

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 9.5 tvOS versions prior to 16.5 macOS Ventura versions prior to 13.4 macOS Big Sur versions prior to 11.7.7 macOS Monterey versions prior to 12.6.6 iOS versions prior to 16.5 iPadOS versions prior to 16.5 Description...

The vulnerability of the TCC subsystem in operating systems macOS, iOS, and iPadOS allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the TCC subsystem in operating systems macOS, iOS, and iPadOS is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information by tracking the user’s location...

CVE-2023-27961

Multiple validation issues were addressed with improved input sanitization. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, watchOS 9.4, macOS Big Sur 11.7.5. Importing a maliciously crafted calendar invitation may exfiltra...

PT-2023-21453 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.4 iPadOS versions prior to 16.4 Description: The issue was addressed with improved memory handling. An app may be able to execute arbitrary code with kernel privileges. Recommendations: For iOS versions prior to 16.4,...

CVE-2023-32290

The myMail app through 14.30 for iOS sends cleartext credentials in a situation where STARTTLS is expected by a server...

CVE-2022-32871

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 16. A person with physical access to a device may be able to use Siri to access private calendar information...

PT-2023-2614

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 15.7.5 and 16.4.1 Apple iPadOS versions prior to 15.7.5 and 16.4.1 Apple macOS versions prior to 11.7.6, 12.6.5, and 13.3.1 Description An out-of-bounds write issue was addressed with improved input validation,...

PT-2023-21436 · Apple · Macos Monterey +5

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.3 iOS versions prior to 15.7.4 iPadOS versions prior to 15.7.4 macOS Monterey versions prior to 12.6.4 macOS Big Sur versions prior to 11.7.5 Description: A validation issue was addressed with improved input...

PT-2023-21430 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.3 macOS Monterey versions prior to 12.6.4 iOS versions prior to 16.4 iPadOS versions prior to 16.4 tvOS versions prior to 16.4 watchOS versions prior to 9.4 Description: The issue was addressed with improved memory...

PT-2023-21438 · Apple · Ipados +3

Name of the Vulnerable Software and Affected Versions: macOS Ventura versions prior to 13.3 iOS versions prior to 16.4 iPadOS versions prior to 16.4 Description: The issue concerns files downloaded from the internet that may not have the quarantine flag applied. This was addressed with improved...

PT-2023-21454 · Apple · Macos Monterey +6

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.3 iOS versions prior to 16.4 iPadOS versions prior to 16.4 iOS versions prior to 15.7.4 iPadOS versions prior to 15.7.4 macOS Monterey versions prior to 12.6.4 watchOS versions prior to 9.4 macOS Big Sur versions...

PT-2023-4223 · Apple +6 · Ipados +10

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.4 iPadOS versions prior to 16.4 macOS Ventura versions prior to 13.3 Description: A use-after-free issue was addressed with improved memory management. Processing web content may lead to arbitrary code execution. The...

PT-2023-19009 · Apple · Ipados +3

Name of the Vulnerable Software and Affected Versions: macOS Ventura versions prior to 13.3 iOS versions prior to 16.4 iPadOS versions prior to 16.4 Description: A logic issue was addressed with improved restrictions, allowing photos belonging to the Hidden Photos Album to be viewed without...

WordPress Plugin WPMobile.App — Android and iOS Mobile Application 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. Cross-site scripting vulnerability exists i...

The vulnerability in operating systems iOS, iPadOS, and macOS Ventura, related to the use of memory after it is freed, allows an attacker to execute arbitrary code.

The vulnerability in the iOS, iPadOS, and macOS Ventura operating systems relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the web page rendering module in the Safari browser, developed by WebKitGTK, as well as in the iOS, iPadOS, and macOS Ventura operating systems, allows attackers to execute arbitrary code.

The vulnerability of the Web page rendering module in the Safari browser, which is part of the WebKitGTK framework, in operating systems such as iOS, iPadOS, and macOS Ventura, is related to type mixing errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code throu...