CVE-2023-41174

CVE-2023-41174 affects Apple platforms: tvOS 17, iOS 17, iPadOS 17, and watchOS 10. The issue stems from improved memory handling and may allow an app to execute arbitrary code with kernel privileges. Affected components are tied to memory handling in the operating systems, leading to potential k...

CVE-2023-40456

CVE-2023-40456 affects Apple platforms (tvOS, iOS, iPadOS, watchOS) where an app may access edited photos saved to a temporary directory due to inadequate access checks. Root cause: insufficient checks in Photos Storage. Impact: potential exposure of edited photos in a temp directory. Mitigation:...

CVE-2023-41986

The issue was addressed with improved checks. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to modify protected parts of the file system...

CVE-2023-41986

CVE-2023-41986 affects Apple platforms; an app may be able to modify protected parts of the file system. The issue is fixed in iOS 17, iPadOS 17, and macOS Sonoma 14. Attack vector is local with user interaction required; no exploitation status is provided beyond the fix in these OS versions. Rem...

CVE-2023-41986

The issue was addressed with improved checks. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to modify protected parts of the file system...

CVE-2023-40417

A window management issue was addressed with improved state management. This issue is fixed in Safari 17, iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. Visiting a website that frames malicious content may lead to UI spoofing...

CVE-2023-40417

A window management issue was addressed with improved state management. This issue is fixed in Safari 17, iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. Visiting a website that frames malicious content may lead to UI spoofing...

CVE-2023-40417

CVE-2023-40417 affects Safari/WebKit window management when visiting framed content, enabling potential UI spoofing. Root cause: improved state management fixes a window-management issue. Impact per sources: UI spoofing risk if a website frames malicious content. Affected products/versions: Safar...

Apple Security Update: iOS 17.0.2 and iPadOS 17.0.2

Apple recommends to install security update iOS 17.0.2 and iPadOS 17.0.2 on devices iPhone XS and later, iPad Pro 12.9-inch 2nd generation and later, iPad Pro 10.5-inch, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 6th generation and later, and iPad mini 5th...

PT-2023-6031 · Apple · Ios +3

Name of the Vulnerable Software and Affected Versions: tvOS versions prior to 17 iOS versions prior to 17 iPadOS versions prior to 17 watchOS versions prior to 10 Description: The issue is related to insufficient access control in the Photos Storage of tvOS, iOS, iPadOS, and watchOS operating...

PT-2023-27443 · Apple · Macos Sonoma +5

Name of the Vulnerable Software and Affected Versions: Safari versions prior to 17 iOS versions prior to 17 iPadOS versions prior to 17 watchOS versions prior to 10 macOS Sonoma versions prior to 14 Description: A window management issue was addressed with improved state management. Visiting a...

PT-2023-8335 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Sonoma 14 iOS versions prior to 17 iPadOS versions prior to 17 Description: The issue is related to insufficient access restrictions in the Music component of macOS, iPadOS, and iOS operating systems. Exploitation of...

PT-2023-6032 · Apple · Ios +3

Name of the Vulnerable Software and Affected Versions: tvOS versions prior to 17 iOS versions prior to 17 and prior to 16.7 iPadOS versions prior to 17 and prior to 16.7 watchOS versions prior to 10 Description: The issue is related to inadequate access control in the MobileStorageMounter compone...

PT-2023-8688 · Apple · Macos Sonoma +6

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 17 Apple iPadOS versions prior to 17 Apple tvOS versions prior to 17 Apple watchOS versions prior to 10 Apple macOS Sonoma versions prior to 14 Apple macOS Ventura versions prior to 13.6.4 Description: The issue is...

PT-2023-27429 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 17 iPadOS versions prior to 17 macOS versions prior to Sonoma 14 watchOS versions prior to 10 tvOS versions prior to 17 Description: The issue was addressed with improved memory handling. An app may be able to execute...

PT-2023-8415 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Sonoma 14 iOS versions prior to 17 iPadOS versions prior to 17 Description: A type confusion issue in the kernel of macOS, iOS, and iPadOS allows a remote user to execute arbitrary code. This issue is related to an err...

PT-2023-8345 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14 iOS versions prior to 17 iPadOS versions prior to 17 Description: The issue is related to a buffer overflow in the kernel of the operating system, which may allow an app to execute arbitrary code with kernel...

PT-2023-27451 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 17 iPadOS versions prior to 17 macOS versions prior to Sonoma 14 Description: A configuration issue was addressed with additional restrictions. This issue may allow an app to access a user's Photos Library...

PT-2023-27447 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 17 iPadOS versions prior to 17 Description: The issue allows an app to potentially access sensitive user data due to improper handling of caches. This has been addressed with improved cache handling. Recommendations: For...

PT-2023-28201 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 17 iPadOS versions prior to 17 macOS versions prior to Sonoma 14 Description: A permissions issue was addressed with additional restrictions. This issue allows an app to potentially bypass Privacy preferences...