CVE-2023-42871

CVE-2023-42871 : A kernel-memory-management issue allows an app to execute arbitrary code with kernel privileges. Public documentation confirms the vulnerability affects Apple platforms and is fixed in macOS Sonoma 14, iOS 17, and iPadOS 17. The issue is described as arising from improved memory ...

CVE-2023-42830

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4. An app may be able to read sensitive location information...

CVE-2023-42830

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4. An app may be able to read sensitive location information...

CVE-2023-42830

CVE-2023-42830 describes a privacy issue where an application may read sensitive location information due to insufficient redaction in log entries. The vulnerability was addressed by improved private data redaction and is fixed in: macOS Ventura 13.3, iOS 16.4, and iPadOS 16.4. The public documen...

CVE-2023-38610

A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14, iOS 17 and iPadOS 17. An app may be able to cause unexpected system termination or write kernel memory...

CVE-2023-38610

A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14, iOS 17 and iPadOS 17. An app may be able to cause unexpected system termination or write kernel memory...

CVE-2023-38610

CVE-2023-38610 is a memory corruption vulnerability associated with Apple's Wi‑Fi component that could allow a local attacker to cause a crash or write kernel memory. The issue was mitigated by removing the vulnerable code and is fixed in macOS Sonoma 14, iOS 17, and iPadOS 17. Connected sources ...

CVE-2023-40437

CVE-2023-40437 concerns a privacy issue in Apple platforms where an app may read sensitive location data due to insufficient private data redaction in log entries. The vulnerability is addressed in iOS 16.6 and iPadOS 16.6, and macOS Ventura 13.5, with Apple stating improved private data redactio...

CVE-2023-40437

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. An app may be able to read sensitive location information...

CVE-2023-40437

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. An app may be able to read sensitive location information...

CVE-2022-42839

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1. An app may be able to read sensitive location information...

CVE-2022-42839

Technical details about CVE-2022-42839 are not publicly provided in the supplied documents; available sources only indicate an Apple iOS/iPadOS/macOS security update addressing location data read risk. Monitor for official disclosures.

CVE-2022-42839

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1. An app may be able to read sensitive location information...

CVE-2023-40529

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 17 and iPadOS 17. A person with physical access to a device may be able to use VoiceOver to access private calendar information...

CVE-2023-40529

CVE-2023-40529: Apple iOS/iPadOS 17 fixed; the issue allowed a person with physical access to use VoiceOver to view private calendar information. The root cause is described as insufficient redaction of sensitive calendar data, addressed by improved redaction in the update. Affected: iOS 17 and i...

CVE-2023-42941

The CVE-2023-42941 issue affects Bluetooth handling in iOS 17.2 and iPadOS 17.2. The root cause is insufficient checks in Bluetooth packet processing that allow an attacker in a privileged network position to trigger a denial-of-service condition. Affected software is Apple iOS 17.2 and iPadOS 17...

CVE-2023-41060

A type confusion issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14, iOS 17 and iPadOS 17. A remote user may be able to cause kernel code execution. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

CVE-2023-42831: Undefined Security Weakness

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Big Sur 11.7.9, iOS 15.7.8 and iPadOS 15.7.8, macOS Monterey 12.6.8, macOS Ventura 13.5. An app may be able to fingerprint the user...

CVE-2023-42872: Undefined Security Weakness

The issue was addressed with additional permissions checks. This issue is fixed in macOS Sonoma 14, iOS 17 and iPadOS 17. An app may be able to access sensitive user data...

PT-2024-12892

Name of the Vulnerable Software and Affected Versions iOS versions prior to 17 iPadOS versions prior to 17 Description This issue allows a person with physical access to a device to potentially access private calendar information using VoiceOver. The issue was addressed with improved redaction of...