CVE-2023-42934

CVE-2023-42934 is an information-disclosure issue in Apple platforms that was fixed by removing vulnerable code. Affected products/versions include macOS Sonoma 14, iOS 17, and iPadOS 17. Impact is that an app with root privileges may access private information. The Public advisories also state t...

CVE-2023-42830

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4. An app may be able to read sensitive location information...

CVE-2023-42871

The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14, iOS 17 and iPadOS 17. An app may be able to execute arbitrary code with kernel privileges...

CVE-2023-42871

CVE-2023-42871 : A kernel-memory-management issue allows an app to execute arbitrary code with kernel privileges. Public documentation confirms the vulnerability affects Apple platforms and is fixed in macOS Sonoma 14, iOS 17, and iPadOS 17. The issue is described as arising from improved memory ...

CVE-2023-42830

CVE-2023-42830 describes a privacy issue where an application may read sensitive location information due to insufficient redaction in log entries. The vulnerability was addressed by improved private data redaction and is fixed in: macOS Ventura 13.3, iOS 16.4, and iPadOS 16.4. The public documen...

CVE-2023-42830

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4. An app may be able to read sensitive location information...

CVE-2023-38610

A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14, iOS 17 and iPadOS 17. An app may be able to cause unexpected system termination or write kernel memory...

CVE-2023-38610

A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14, iOS 17 and iPadOS 17. An app may be able to cause unexpected system termination or write kernel memory...

CVE-2023-38610

CVE-2023-38610 is a memory corruption vulnerability associated with Apple's Wi‑Fi component that could allow a local attacker to cause a crash or write kernel memory. The issue was mitigated by removing the vulnerable code and is fixed in macOS Sonoma 14, iOS 17, and iPadOS 17. Connected sources ...

CVE-2023-40437

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. An app may be able to read sensitive location information...

CVE-2023-40437

CVE-2023-40437 concerns a privacy issue in Apple platforms where an app may read sensitive location data due to insufficient private data redaction in log entries. The vulnerability is addressed in iOS 16.6 and iPadOS 16.6, and macOS Ventura 13.5, with Apple stating improved private data redactio...

CVE-2023-40437

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. An app may be able to read sensitive location information...

CVE-2022-42839

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1. An app may be able to read sensitive location information...

CVE-2022-42839

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1. An app may be able to read sensitive location information...

CVE-2022-42839

Technical details about CVE-2022-42839 are not publicly provided in the supplied documents; available sources only indicate an Apple iOS/iPadOS/macOS security update addressing location data read risk. Monitor for official disclosures.

CVE-2023-40529

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 17 and iPadOS 17. A person with physical access to a device may be able to use VoiceOver to access private calendar information...

CVE-2023-40529

CVE-2023-40529: Apple iOS/iPadOS 17 fixed; the issue allowed a person with physical access to use VoiceOver to view private calendar information. The root cause is described as insufficient redaction of sensitive calendar data, addressed by improved redaction in the update. Affected: iOS 17 and i...

CVE-2023-42941

The CVE-2023-42941 issue affects Bluetooth handling in iOS 17.2 and iPadOS 17.2. The root cause is insufficient checks in Bluetooth packet processing that allow an attacker in a privileged network position to trigger a denial-of-service condition. Affected software is Apple iOS 17.2 and iPadOS 17...

CVE-2023-41060

A type confusion issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14, iOS 17 and iPadOS 17. A remote user may be able to cause kernel code execution. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

Apple iOS and iPadOS Security Vulnerabilities

Apple iOS and Apple iPadOS are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS version 15.7.4 and iPadOS version 15.7.4 that originates in an applicati...