Design/Logic Flaw

The issue was addressed with improved handling of protocols. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. An app may fail to enforce App Transport Security...

Design/Logic Flaw

The issue was addressed with improved checks. This issue is fixed in iOS 17 and iPadOS 17, watchOS 10, iOS 16.7 and iPadOS 16.7, macOS Sonoma 14. An app may be able to identify what other apps a user has installed...

CVE-2023-32361

CVE-2023-32361 affects Apple operating systems (tvOS 17, iOS 17/iPadOS 17, watchOS 10, macOS Sonoma 14). The vulnerability stems from improved handling of caches, enabling an app to access user-sensitive data. Apple lists fixed versions: tvOS 17, iOS 17, iPadOS 17, watchOS 10, macOS Sonoma 14. Th...

CVE-2023-41073

An authorization issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to access protected user data...

CVE-2023-40418

An authentication issue was addressed with improved state management. This issue is fixed in watchOS 10. An Apple Watch Ultra may not lock when using the Depth app...

CVE-2023-41232

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.7, iOS 17 and iPadOS 17, macOS Ventura 13.6, iOS 16.7 and iPadOS 16.7. An app may be able to disclose kernel memory...

CVE-2023-41232

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.7, iOS 17 and iPadOS 17, macOS Ventura 13.6, iOS 16.7 and iPadOS 16.7. An app may be able to disclose kernel memory...

CVE-2023-41068

CVE-2023-41068 concerns an access control flaw in the MobileStorageMounter component of Apple’s operating systems. The issue may allow a user to elevate privileges. It affects tvOS, iOS, iPadOS, and watchOS prior to the fixed releases. Remediation is to update to: tvOS 17, iOS 17, iPadOS 17, watc...

CVE-2023-40424

CVE-2023-40424 affects Apple platforms (iOS/iPadOS/watchOS/macOS Sonoma 14) where an app may access user‑sensitive data. Connected sources show the root cause as a vulnerability in privacy/data‑exposure controls, with remediation involving improved checks in components such as TCC and AppSandbox....

CVE-2023-40424

The issue was addressed with improved checks. This issue is fixed in iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. An app may be able to access user-sensitive data...

CVE-2023-39233

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may disclose sensitive information...

CVE-2023-35990

The issue was addressed with improved checks. This issue is fixed in iOS 17 and iPadOS 17, watchOS 10, iOS 16.7 and iPadOS 16.7, macOS Sonoma 14. An app may be able to identify what other apps a user has installed...

CVE-2023-35990

The issue was addressed with improved checks. This issue is fixed in iOS 17 and iPadOS 17, watchOS 10, iOS 16.7 and iPadOS 16.7, macOS Sonoma 14. An app may be able to identify what other apps a user has installed...

CVE-2023-35990

CVE-2023-35990 affects Apple platforms (iOS, iPadOS, watchOS, macOS Sonoma) where an app could determine which other apps are installed on the device. The issue is mitigated by Apple’s fixes in iOS 17/iPadOS 17, watchOS 10, iOS 16.7/iPadOS 16.7, and macOS Sonoma 14. The root cause is linked to in...

CVE-2023-40429

A permissions issue was addressed with improved validation. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. An app may be able to access sensitive user data...

CVE-2023-40452

The issue was addressed with improved bounds checks. This issue is fixed in macOS Ventura 13.6, tvOS 17, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to overwrite arbitrary files...

CVE-2023-40448

The issue was addressed with improved handling of protocols. This issue is fixed in tvOS 17, iOS 16.7 and iPadOS 16.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. A remote attacker may be able to break out of Web Content sandbox...

CVE-2023-40448

CVE-2023-40448 affects Apple platforms (tvOS, iOS, iPadOS, watchOS, macOS Sonoma 14) where the Web Content sandbox isolation could be escaped. The issue stems from protocol handling, and Apple lists fixes in tvOS 17, iOS 16.7 / 17, iPadOS 16.7 / 17, watchOS 10, and macOS Sonoma 14. No exploitatio...

CVE-2023-41074

The issue was addressed with improved checks. This issue is fixed in tvOS 17, Safari 17, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may lead to arbitrary code execution...

CVE-2023-37448

A lock screen issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14. A user may be able to view restricted content from the lock screen...