13199 matches found
CVE-2023-42841: Improper Restriction of Operations within the Bounds of a Memory Buffer
The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Ventura 13.6.1. An app may be able to execute arbitrary code with kernel privileges...
CVE-2023-32359: Undefined Security Weakness
This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 16.7.2 and iPadOS 16.7.2. A user's password may be read aloud by VoiceOver...
CVE-2023-42847: Undefined Security Weakness
A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1. An attacker may be able to access passkeys without authentication...
About the security content of iOS 17.1 and iPadOS 17.1
About the security content of iOS 17.1 and iPadOS 17.1 This document describes the security content of iOS 17.1 and iPadOS 17.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...
PT-2023-6640 · Apple · Ios +3
Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 10.1 iOS versions prior to 16.7.2 and prior to 17.1 iPadOS versions prior to 16.7.2 and prior to 17.1 tvOS versions prior to 17.1 Description: The issue is related to the mDNSResponder component in Apple operating...
Exploit for Improper Check for Unusual or Exceptional Conditions in Apple Ipados
CVE-2023-41993 PoC exploit for CVE-2023-41993. It's written o...
Safari Information Disclosure
The vulnerability of the Safari browser in operating systems such as watchOS, iPadOS, macOS, and iOS is related to the lack of protection for service data. Exploiting this vulnerability can allow attackers to disclose sensitive information that should be protected...
biometric authentication Disclosure
The vulnerability of biometric authentication functions in operating systems iPadOS, iOS, and macOS lies in the reading of data beyond the buffer in memory. Exploiting this vulnerability can allow attackers to disclose sensitive information that is protected by these systems...
Debian DSA-5527-1 : webkit2gtk - security update
The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5527 advisory. The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2023-39928 Marcin Noga discovered that a specially crafted web page can...
PT-2023-8210 · Apple +7 · Macos Sonoma +14
Name of the Vulnerable Software and Affected Versions: Safari versions prior to 17.2 macOS Sonoma versions prior to 14.2 watchOS versions prior to 10.2 iOS versions prior to 17.2 iPadOS versions prior to 17.2 tvOS versions prior to 17.2 Description: The issue is caused by a buffer overflow in the...
PT-2025-16123 · Apple +5 · Ios +10
Name of the Vulnerable Software and Affected Versions: iOS versions prior to 17 iPadOS versions prior to 17 macOS Sonoma versions prior to 14 watchOS versions prior to 10 tvOS versions prior to 17 Safari versions prior to 17 Description: A use-after-free issue was addressed with improved memory...
PT-2025-16121
Name of the Vulnerable Software and Affected Versions: Safari versions prior to 17 iOS versions prior to 17 iPadOS versions prior to 17 macOS versions prior to Sonoma 14 watchOS versions prior to 10 tvOS versions prior to 17 Description: Processing web content may lead to arbitrary code execution...
Share Sheet Disclosure
The vulnerability of the Share Sheet component in iPadOS, tvOS, iOS, and watchOS is related to the lack of protection for service data. Exploiting this vulnerability can allow attackers to disclose sensitive information...
Accounts Component Unauthorized Access
The vulnerability of the Accounts component in iPadOS, tvOS, iOS, and watchOS is related to errors in the use of standard permissions. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
About the security content of iOS 16.7.1 and iPadOS 16.7.1
About the security content of iOS 16.7.1 and iPadOS 16.7.1 This document describes the security content of iOS 16.7.1 and iPadOS 16.7.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...
Apple Releases Security Updates for iOS and iPadOS
Apple has released security updates to address vulnerabilities in iOS and iPadOS. A cyber threat actor could exploit these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following advisory and apply the necessary updates: iOS 17.0.3 a...
XNU kernel Privilege Escalation
The vulnerability of the XNU kernel in iPadOS and iOS systems relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to gain increased privileges...
Apple Rolls Out Security Patches for Actively Exploited iOS Zero-Day Flaw
Apple on Wednesday rolled out security patches to address a new zero-day flaw in iOS and iPadOS that it said has come under active exploitation in the wild. Tracked as CVE-2023-42824, the kernel vulnerability could be abused by a local attacker to elevate their privileges. The iPhone maker said i...
Sandbox Re-record Files
The vulnerability of the Sandbox component in operating systems such as iPadOS, tvOS, iOS, watchOS, and macOS arises from the execution of operations outside the buffer in memory. Exploiting this vulnerability allows an attacker to overwrite arbitrary files...
