PT-2023-2890 · Apple · Macos Monterey +7

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 9.5 tvOS versions prior to 16.5 macOS Ventura versions prior to 13.4 macOS Big Sur versions prior to 11.7.7 macOS Monterey versions prior to 12.6.6 iOS versions prior to 15.7.6 and prior to 16.5 iPadOS versions prior...

部分Apple产品 安全漏洞

Apple macOS Ventura is a desktop operating system from Apple Inc. in the United States. A security vulnerability exists in some Apple products, which stems from processing images that may lead to arbitrary code execution. The following products and versions are affected: watchOS before 9.5, tvOS...

部分Apple产品 安全漏洞

Apple Safari is a web browser from Apple Inc. and is the default browser that comes with the Mac OS X and iOS operating systems. A security vulnerability exists in some Apple products, which stems from the handling of Web content that may disclose sensitive information. The following products and...

Apple iOS 和iPadOS 缓冲区错误漏洞

Apple iOS and Apple iPadOS are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A buffer error vulnerability exists in Apple iOS prior to 16.5 and iPadOS prior to 16.5, which stems from an...

The vulnerability of the TCC subsystem in operating systems macOS, iOS, and iPadOS allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the TCC subsystem in operating systems macOS, iOS, and iPadOS is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information by tracking the user’s location...

The vulnerability of the Web page rendering module in the Safari browser, developed by WebKit, and in the iPadOS and iOS operating systems, allows a perpetrator to execute arbitrary code.

The vulnerability of the Web page rendering module in WebKit browsers of Safari, as well as in the iPadOS and iOS operating systems, is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

MAL-2023-478 Malicious code in god-a-human-history-by-reza-aslan-on-ipad-new-version- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ceaa90b6b9f360d75eeb0e21cc701c5ccc46fafebef1bdb9356bce898fbb1bfb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-280 Malicious code in dow-load-the-best-we-could-do-by-thi-bui-on-ipad-new-format- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cbe34371c86eb25d33028fc43131c1b1b281f7e57986816c88163b17125302b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-870 Malicious code in the-great-passage-by-shion-miura-on-ipad-full-edition- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc6059821330a42297e793c18eb3cfae527b38b35d3c5491f5f0dd6e9eb2f5e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-281 Malicious code in dow-load-the-great-passage-by-shion-miura-on-ipad-full-edition- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7453c3c15a37f19882cd0f66e9ffdc34fdc1eb13e0c7a7f56ab92620e8ce64f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-612 Malicious code in my-turn-the-autobiography-by-johan-cruyff-on-ipad-full-volumes- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08b8925829bf5a8abfb8f71ad7c9d79bd27ceaf430d5ce27f22d6c7d6ccc33a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-864 Malicious code in the-ashes-of-london-marwood-and-lovett-1-by-andrew-taylor-on-ipad-full-volumes- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 097c2145981a125fa3f3ad898d922ad32b2760f65e716e2adea2192c7738eae7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-869 Malicious code in the-girl-with-the-make-believe-husband-rokesbys-2-by-julia-quinn-on-ipad-new-chapters- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80326e5ea00baebd679ede31f64bd96a16aa3a4e24d1158a6769bc380c19f7e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-28201

This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, tvOS 16.4. A remote user may be able to cause unexpected app termination or arbitrary code execution...

CVE-2023-27969

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, tvOS 16.4, watchOS 9.4. An app may be able to execute arbitrary code with kernel privileges...

CVE-2023-27961

Multiple validation issues were addressed with improved input sanitization. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, watchOS 9.4, macOS Big Sur 11.7.5. Importing a maliciously crafted calendar invitation may exfiltra...

CVE-2023-27956

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, tvOS 16.4, watchOS 9.4. Processing a maliciously crafted image may result in disclosure of process memory...

CVE-2023-23540

The issue was addressed with improved memory handling. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, macOS Monterey 12.6.4, iOS 16.4 and iPadOS 16.4, macOS Big Sur 11.7.5. An app may be able to execute arbitrary code with kernel privileges...

CVE-2023-23537

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, watchOS 9.4, macOS Big Sur 11.7.5. An app may be able to read sensitive location information...

CVE-2023-23532

This issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.6 and iPadOS 15.7.6. An app may be able to break out of its sandbox...