CVE-2023-32439

CVE-2023-32439 is a type confusion vulnerability in Apple’s WebKit used by iOS, iPadOS, macOS and Safari. The issue allows arbitrary code execution when processing malicious web content and is fixed in iOS 16.5.1/iPadOS 16.5.1, iOS 15.7.7/iPadOS 15.7.7, macOS Ventura 13.4.1, and Safari 16.5.1. Ea...

CVE-2023-32419

CVE-2023-32419 describes a bounds-checks issue in Apple iOS/iPadOS that could allow a remote attacker to execute arbitrary code. It is fixed in iOS 16.5 and iPadOS 16.5. No exploitation details are provided beyond that; updating to the patched OS versions is the recommended remediation.

PT-2023-23782 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.5 iPadOS versions prior to 16.5 Description: The issue allows a remote attacker to potentially cause arbitrary code execution due to insufficient bounds checks. Recommendations: For iOS versions prior to 16.5, update ...

CVE-2023-32368

The CVE-2023-32368 issue is an out-of-bounds read in 3D model processing that may disclose process memory. Root cause: improved input validation addressed the vulnerability. Affected Apple platforms include macOS Monterey 12.6.6, macOS Ventura 13.4, iOS 16.5, iPadOS 16.5, watchOS 9.5, and tvOS 16...

CVE-2023-32389

CVE-2023-32389 is an Apple kernel memory disclosure vulnerability affecting multiple Apple platforms (iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvOS 16.5, macOS Ventura 13.4). The issue is described as an information disclosure that could allow an app to disclose kernel memory. The CVE entry lists a...

CVE-2023-27940

CVE-2023-27940 affects Apple platforms (iOS 15.7.6 and iPadOS 15.7.6; macOS Monterey 12.6.6; macOS Ventura 13.4). The issue is due to insufficient permissions checks in a kernel component, allowing a sandboxed app to observe system-wide network connections. Apple’s bulletin states the vulnerabili...

The vulnerability of the Web page rendering module in the WebKit browser of Apple’s operating systems macOS, iOS, iPadOS allows a hacker to execute arbitrary code.

The vulnerability of the Web page rendering module in WebKit of Apple Safari browsers for operating systems macOS, iOS, iPadOS is related to type conversion errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2023-32384

CVE-2023-32384 affects Apple operating systems including watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 15.7.6 and 16.5, and iPadOS 15.7.6 and 16.5. The issue is a buffer overflow triggered during image processing, with the root cause stated as improv...

CVE-2022-42792

CVE-2022-42792 affects iOS/iPadOS where an app may read sensitive location information due to inadequate data protection. Multiple connected sources confirm the issue and outcomes: Apple’s security content states the fix is in iOS 16.1 and iPadOS 16; Red Hat/PRION and NVD entries mirror this, not...

CVE-2023-32411

The CVE-2023-32411 issue concerns bypassing Privacy preferences via entitlements, addressed by Apple through updated entitlements. The vulnerability is fixed in tvOS 16.5, macOS Ventura 13.4, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5, and iPadOS 16.5. Affected context: local exploit p...

CVE-2023-32439

A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5.1 and iPadOS 16.5.1, iOS 15.7.7 and iPadOS 15.7.7, macOS Ventura 13.4.1, Safari 16.5.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this...

CVE-2023-32407

CVE-2023-32407 describes a logic issue in Apple platforms that could allow an app to bypass Privacy preferences. Affected components are not explicitly enumerated in the provided documents, but constants indicate multiple Apple OSes are impacted (watchOS, tvOS, macOS, iOS, iPadOS) with versions l...

CVE-2023-32439

A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5.1 and iPadOS 16.5.1, iOS 15.7.7 and iPadOS 15.7.7, macOS Ventura 13.4.1, Safari 16.5.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this...

CVE-2023-32435

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, iOS 15.7.7 and iPadOS 15.7.7. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have...

CVE-2023-28204

An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, Safari 16.5, iOS 16.5 and iPadOS 16.5. Processing web content may disclose sensitive information. Apple is aware of a report that th...

CVE-2023-32373

A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, Safari 16.5, iOS 16.5 and iPadOS 16.5. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is...

CVE-2023-32409

The issue was addressed with improved bounds checks. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.8 and iPadOS 15.7.8, Safari 16.5, iOS 16.5 and iPadOS 16.5. A remote attacker may be able to break out of Web Content sandbox. Apple is aware of a report that this issu...

Apple Multiple Products Integer Overflow Vulnerability

Apple iOS. iPadOS, macOS, and watchOS contain an integer overflow vulnerability that could allow an application to execute code with kernel privileges...

Apple Multiple Products WebKit Type Confusion Vulnerability

Apple iOS, iPadOS, macOS, and Safari WebKit contain a type confusion vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rel...

Apple Multiple Products WebKit Memory Corruption Vulnerability

Apple iOS, iPadOS, macOS, and Safari WebKit contain a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which...