CVE-2023-27955

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Monterey 12.6.4, tvOS 16.4, macOS Big Sur 11.7.5. An app may be able to read arbitrary files...

CVE-2023-28181

CVE-2023-28181 affects Apple platforms (notably CoreCapture and Kernel-related components) with a memory handling flaw that could allow an app to execute arbitrary code with kernel privileges. The issue is fixed in macOS Ventura 13.3, iOS 16.4 / iPadOS 16.4, iOS 15.7.6 / iPadOS 15.7.6, macOS Mont...

CVE-2023-23527

CVE-2023-23527 is an Apple OS vulnerability addressed by updates across multiple platforms. The issue allows a user to gain access to protected parts of the file system and is mitigated by patches in macOS Ventura 13.3, macOS Big Sur 11.7.5, macOS Monterey 12.6.4, iOS 16.4, iPadOS 16.4, tvOS 16.4...

CVE-2023-23523

CVE-2023-23523 affects Apple devices where Photos in the Hidden Photos Album could be viewed without authentication via Visual Lookup due to a logic issue. The issue is fixed in macOS Ventura 13.3 and in iOS/iPadOS 16.4. The NVD entry notes a local attack vector with user interaction required, an...

CVE-2023-23526

CVE-2023-23526 involves Gatekeeper bypass via a file downloaded from an iCloud Shared by Me folder. The issue arises from insufficient checks in Gatekeeper, allowing a file from that folder to bypass the gatekeeping checks. Apple fixed this by addressing the vulnerability with additional checks, ...

CVE-2023-27959

CVE-2023-27959 affects Apple iOS and iPadOS kernels. The vulnerability could allow an app to execute arbitrary code with kernel privileges due to memory handling issues. Apple’s advisories confirm the fix is implemented in iOS 16.4 and iPadOS 16.4. Affected component: Apple Neural Engine entries ...

CVE-2023-23543

CVE-2023-23543 affects Apple platforms (macOS Ventura 13.3; iOS 15.7.4/iPadOS 15.7.4; iOS 16.4/iPadOS 16.4; watchOS 9.4). A sandboxed app may be able to determine which other app is currently using the camera due to restricted observability of app states. Root cause: privacy-related observability...

CVE-2023-27937

CVE-2023-27937 describes an integer overflow that was mitigated using improved input validation. The issue affects multiple Apple platforms and versions, where parsing a maliciously crafted plist can cause an app to terminate or execute arbitrary code. Affected software includes macOS Ventura 13....

CVE-2023-27928

The CVE-2023-27928 vulnerability concerns a privacy issue where private data redaction for log entries was insufficient, potentially allowing an app to access information about a user’s contacts. Affected products and versions include: macOS Big Sur 11.7.5; macOS Ventura 13.3; iOS 15.7.4 and iOS ...

CVE-2022-46720

CVE-2022-46720 affects Apple platforms (iOS 16.2, iPadOS 16.2, macOS Ventura 13.1). Root cause: integer overflow mitigated by improved input validation in dyld, with the issue described as allowing an app to break out of its sandbox. Impact: sandbox escape if exploited. Exploitation details are n...

CVE-2023-27942

CVE-2023-27942 affects Apple platforms (macOS, iOS, iPadOS, tvOS, watchOS). The issue involved an app potentially accessing user‑sensitive data due to insufficient checks; Apple addressed it with improved checks. The fix is listed for macOS Ventura 13.3, macOS Big Sur 11.7.5, macOS Monterey 12.6....

CVE-2023-27942

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Big Sur 11.7.5, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. An app may be able to access user-sensitive data...

CVE-2023-23526

This was addressed with additional checks by Gatekeeper on files downloaded from an iCloud shared-by-me folder. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4. A file from an iCloud shared-by-me folder may be able to bypass Gatekeeper...

CVE-2023-27936

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. An app may be able to cause unexpected system termination or write kernel memory...

CVE-2023-28194

The issue was addressed with improved checks. This issue is fixed in iOS 16.4 and iPadOS 16.4. An app may be able to unexpectedly create a bookmark on the Home Screen...

CVE-2023-27932

This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, tvOS 16.4, watchOS 9.4. Processing maliciously crafted web content may bypass Same Origin Policy...

CVE-2023-27970

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 16.4 and iPadOS 16.4. An app may be able to execute arbitrary code with kernel privileges...

CVE-2023-27963

The issue was addressed with additional permissions checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. A shortcut may be able to use sensitive data with certain actions without prompting the use...

CVE-2023-27956

The CVE-2023-27956 issue concerns the FontParser component on Apple platforms. It describes a memory handling flaw that, when processing a maliciously crafted image, could disclose process memory. Affected products/versions include macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPad...

CVE-2023-28181

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.6 and iPadOS 15.7.6, macOS Monterey 12.6.4, macOS Big Sur 11.7.7, tvOS 16.4, watchOS 9.4. An app may be able to execute arbitrary code with kernel privileges...