CVE-2023-41063

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to execute arbitrary code with kernel privileges...

CVE-2023-40520

The issue was addressed with improved checks. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10. An app may be able to access edited photos saved to a temporary directory...

CVE-2023-40432

CVE-2023-40432 is associated with Apple platforms and is addressed by memory-management fixes in multiple OS updates. The connected Apple security content indicates the vulnerability could allow an app to execute arbitrary code with kernel privileges and that mitigation is via updated memory hand...

CVE-2023-40432

The issue was addressed with improved memory handling. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. An app may be able to execute arbitrary code with kernel privileges...

CVE-2023-40520

The CVE-2023-40520 issue concerns Apple platforms where an app could access edited photos saved in a temporary directory due to insufficient access control in Photos Storage. Affected products include tvOS, iOS, iPadOS (all before 17) and watchOS before 10. The underlying problem is improper acce...

CVE-2023-40520

The issue was addressed with improved checks. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10. An app may be able to access edited photos saved to a temporary directory...

CVE-2023-40432

The issue was addressed with improved memory handling. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. An app may be able to execute arbitrary code with kernel privileges...

CVE-2023-40424

The issue was addressed with improved checks. This issue is fixed in iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. An app may be able to access user-sensitive data...

CVE-2023-40424

The issue was addressed with improved checks. This issue is fixed in iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. An app may be able to access user-sensitive data...

CVE-2023-40424

CVE-2023-40424 affects Apple platforms (iOS/iPadOS/watchOS/macOS Sonoma 14) where an app may access user‑sensitive data. Connected sources show the root cause as a vulnerability in privacy/data‑exposure controls, with remediation involving improved checks in components such as TCC and AppSandbox....

CVE-2023-41995

CVE-2023-41995 describes a use-after-free vulnerability in Apple kernel components surfaced as memory-management issue. Affected products include iOS 17, iPadOS 17, and macOS Sonoma 14. The flaw may allow an app to execute arbitrary code with kernel privileges, with a local attack vector and user...

CVE-2023-40384

A permissions issue was addressed with improved redaction of sensitive information. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to read sensitive location information...

CVE-2023-40384

CVE-2023-40384 describes a permissions issue where an app may read sensitive location information. Apple fixed it by improving redaction of sensitive data. The fix courses include tvOS 17, iOS 17, iPadOS 17, and macOS Sonoma 14. The Connected documents confirm the vulnerability and the affected O...

CVE-2023-40384

A permissions issue was addressed with improved redaction of sensitive information. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to read sensitive location information...

CVE-2023-40412

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17. An app may be able to execute arbitrary code with kernel privileges...

CVE-2023-40412

CVE-2023-40412 affects Apple platforms and was fixed by memory-handling improvements. The issue could allow an app to execute arbitrary code with kernel privileges. Affected items include macOS Ventura 13.6, macOS Monterey 12.7, iOS 17, iPadOS 17, tvOS 17, and watchOS 10. The connected documents ...

CVE-2023-40428

The issue was addressed with improved handling of caches. This issue is fixed in iOS 17 and iPadOS 17. An app may be able to access sensitive user data...

CVE-2023-35990

The issue was addressed with improved checks. This issue is fixed in iOS 17 and iPadOS 17, watchOS 10, iOS 16.7 and iPadOS 16.7, macOS Sonoma 14. An app may be able to identify what other apps a user has installed...

CVE-2023-35990

CVE-2023-35990 affects Apple platforms (iOS, iPadOS, watchOS, macOS Sonoma) where an app could determine which other apps are installed on the device. The issue is mitigated by Apple’s fixes in iOS 17/iPadOS 17, watchOS 10, iOS 16.7/iPadOS 16.7, and macOS Sonoma 14. The root cause is linked to in...

CVE-2023-40428

CVE-2023-40428 describes an issue in Apple’s iOS/iPadOS where improper cache handling could allow an app to access sensitive user data. The vulnerability is fixed in iOS 17 and iPadOS 17. Connected sources confirm the same description across multiple advisories (Apple and Red Hat) and align on th...