CVE-2023-42872

CVE-2023-42872 is an Apple security issue where an app may access sensitive user data due to insufficient permissions checks in the AppleMobileFileIntegrity component. The vulnerability is tied to macOS, iOS, and iPadOS and is fixed in macOS Sonoma 14, iOS 17, and iPadOS 17. Public documentation ...

CVE-2023-42833

A correctness issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14, Safari 17, iOS 17 and iPadOS 17. Processing web content may lead to arbitrary code execution...

CVE-2023-42833

A correctness issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14, Safari 17, iOS 17 and iPadOS 17. Processing web content may lead to arbitrary code execution...

CVE-2023-42833

A correctness issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14, Safari 17, iOS 17 and iPadOS 17. Processing web content may lead to arbitrary code execution...

CVE-2023-42833

CVE-2023-42833 is a WebKitGTK/WebKitGTK+ correctness issue where processing web content could lead to arbitrary code execution. The vendor advisory notes fixes in macOS Sonoma 14, Safari 17, iOS 17, and iPadOS 17. Root cause: improved checks in WebKit to address the vulnerability. Practical impac...

CVE-2022-32919

The issue was addressed with improved UI handling. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1. Visiting a website that frames malicious content may lead to UI spoofing...

CVE-2022-32919

The issue was addressed with improved UI handling. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1. Visiting a website that frames malicious content may lead to UI spoofing...

CVE-2022-32919

CVE-2022-32919 affects WebKitGTK and WPE WebKit, where improper UI handling enables UI spoofing when framing malicious content. The initial description notes a fix in iOS 16.2 / iPadOS 16.2 / macOS Ventura 13.1, and connected documents (Alibaba Cloud Linux advisory) list CVE-2022-32919 among WebK...

CVE-2023-28185

CVE-2023-28185 is an Apple platform issue where an integer overflow was mitigated by improved input validation. Affected versions include tvOS 16.4, macOS Big Sur 11.7.5, macOS Monterey 12.6.4, iOS 16.4 and 15.7.4, iPadOS 16.4 and 15.7.4, and watchOS 9.4. The vulnerability could allow a local att...

CVE-2023-38612

CVE-2023-38612 affects Apple platforms where an app may access protected user data due to insufficient checks. The vulnerability is addressed by updates: macOS Monterey 12.7, macOS Ventura 13.6, macOS Sonoma 14, iOS 16.7/iPadOS 16.7, and iOS 17/iPadOS 17. The issue was mitigated by improved check...

CVE-2023-38612

The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7, iOS 16.7 and iPadOS 16.7, iOS 17 and iPadOS 17, macOS Sonoma 14, macOS Ventura 13.6. An app may be able to access protected user data...

CVE-2023-42865

CVE-2023-42865 affects Apple platforms (macOS Ventura 13.3, tvOS 16.4, iOS 16.4, iPadOS 16.4, watchOS 9.4). Description: an out-of-bounds read was addressed by improved input validation, with the impact described as potential disclosure of process memory when processing an image. Affected compone...

CVE-2023-42865

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, tvOS 16.4, iOS 16.4 and iPadOS 16.4, watchOS 9.4. Processing an image may result in disclosure of process memory...

CVE-2023-42865

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, tvOS 16.4, iOS 16.4 and iPadOS 16.4, watchOS 9.4. Processing an image may result in disclosure of process memory...

CVE-2023-40439

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. An app may be able to read sensitive location information...

CVE-2023-40439

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. An app may be able to read sensitive location information...

CVE-2023-40439

CVE-2023-40439 is a privacy issue affecting Apple platforms (iOS 16.6, iPadOS 16.6, macOS Ventura 13.5). It enables an app to read sensitive location information due to improved private data redaction for log entries, and is fixed in the cited Apple updates. Red Hat’s RH:CVE-2023-40439 entry simi...

CVE-2023-42869

CVE-2023-42869 is a set of multiple memory corruption issues in libxml2 that were addressed through improved input validation. The CVE entry notes the fixes are included in Apple products: macOS Ventura 13.4, iOS 16.5, and iPadOS 16.5. Connected sources corroborate that the libxml2 problems were ...

CVE-2023-42869

Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Ventura 13.4, iOS 16.5 and iPadOS 16.5. Multiple issues in libxml2...

CVE-2023-42869

Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Ventura 13.4, iOS 16.5 and iPadOS 16.5. Multiple issues in libxml2...