CVE-2023-42857: Insertion of Sensitive Information into Log File

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1. An app may be able to access sensitive user data...

CVE-2023-41977: Undefined Security Weakness

The issue was addressed with improved handling of caches. This issue is fixed in macOS Sonoma 14.1, iOS 16.7.2 and iPadOS 16.7.2. Visiting a malicious website may reveal browsing history...

CVE-2023-42846: Exposure of Sensitive Information to an Unauthorized Actor

This issue was addressed by removing the vulnerable code. This issue is fixed in watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, tvOS 17.1, iOS 17.1 and iPadOS 17.1. A device may be passively tracked by its Wi-Fi MAC address...

Exploit for Improper Check for Unusual or Exceptional Conditions in Apple Ipados

CVE-2023-41993 PoC exploit for CVE-2023-41993. It's written o...

Safari Information Disclosure

The vulnerability of the Safari browser in operating systems such as watchOS, iPadOS, macOS, and iOS is related to the lack of protection for service data. Exploiting this vulnerability can allow attackers to disclose sensitive information that should be protected...

biometric authentication Disclosure

The vulnerability of biometric authentication functions in operating systems iPadOS, iOS, and macOS lies in the reading of data beyond the buffer in memory. Exploiting this vulnerability can allow attackers to disclose sensitive information that is protected by these systems...

Debian DSA-5527-1 : webkit2gtk - security update

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5527 advisory. The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2023-39928 Marcin Noga discovered that a specially crafted web page can...

PT-2025-16123 · Apple +5 · Ios +10

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 17 iPadOS versions prior to 17 macOS Sonoma versions prior to 14 watchOS versions prior to 10 tvOS versions prior to 17 Safari versions prior to 17 Description: A use-after-free issue was addressed with improved memory...

PT-2025-16121

Name of the Vulnerable Software and Affected Versions: Safari versions prior to 17 iOS versions prior to 17 iPadOS versions prior to 17 macOS versions prior to Sonoma 14 watchOS versions prior to 10 tvOS versions prior to 17 Description: Processing web content may lead to arbitrary code execution...

PT-2023-8210 · Apple +7 · Macos Sonoma +14

Name of the Vulnerable Software and Affected Versions: Safari versions prior to 17.2 macOS Sonoma versions prior to 14.2 watchOS versions prior to 10.2 iOS versions prior to 17.2 iPadOS versions prior to 17.2 tvOS versions prior to 17.2 Description: The issue is caused by a buffer overflow in the...

Share Sheet Disclosure

The vulnerability of the Share Sheet component in iPadOS, tvOS, iOS, and watchOS is related to the lack of protection for service data. Exploiting this vulnerability can allow attackers to disclose sensitive information...

Accounts Component Unauthorized Access

The vulnerability of the Accounts component in iPadOS, tvOS, iOS, and watchOS is related to errors in the use of standard permissions. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

About the security content of iOS 16.7.1 and iPadOS 16.7.1

About the security content of iOS 16.7.1 and iPadOS 16.7.1 This document describes the security content of iOS 16.7.1 and iPadOS 16.7.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...

Apple Releases Security Updates for iOS and iPadOS

Apple has released security updates to address vulnerabilities in iOS and iPadOS. A cyber threat actor could exploit these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following advisory and apply the necessary updates: iOS 17.0.3 a...

XNU kernel Privilege Escalation

The vulnerability of the XNU kernel in iPadOS and iOS systems relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to gain increased privileges...

Apple Rolls Out Security Patches for Actively Exploited iOS Zero-Day Flaw

Apple on Wednesday rolled out security patches to address a new zero-day flaw in iOS and iPadOS that it said has come under active exploitation in the wild. Tracked as CVE-2023-42824, the kernel vulnerability could be abused by a local attacker to elevate their privileges. The iPhone maker said i...

Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability

Apple iOS and iPadOS contain an unspecified vulnerability that allows for local privilege escalation...

DriverKit Code Execution

The vulnerability of the DriverKit component for operating systems such as tvOS, iOS, iPadOS, watchOS, and macOS relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Neural Engine Code Execution

The vulnerability of the Neural Engine component in iPadOS, tvOS, iOS, watchOS, and macOS arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

iPadOS tvOS iOS watchOS macOS Kernel Code Execution

The vulnerability of the operating system kernels in iPadOS, tvOS, iOS, watchOS, and macOS is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...