CVE-2023-27943

CVE-2023-27943 relates to macOS/iOS quarantine handling for files downloaded from the internet. The vulnerability description notes that files may not have the quarantine flag applied, and Apple’s fix is described as “improved checks.” Public documents confirm affected platforms: macOS Ventura 13...

CVE-2023-23494

CVE-2023-23494 affects Apple iOS and iPadOS 16.4 releases. The issue is described as a buffer overflow that was addressed by improved bounds checking, with the fix available in iOS 16.4 and iPadOS 16.4. The documented impact is that a user in a privileged network position may cause a denial-of-se...

CVE-2023-27942

CVE-2023-27942 affects Apple platforms (macOS, iOS, iPadOS, tvOS, watchOS). The issue involved an app potentially accessing user‑sensitive data due to insufficient checks; Apple addressed it with improved checks. The fix is listed for macOS Ventura 13.3, macOS Big Sur 11.7.5, macOS Monterey 12.6....

CVE-2023-27963

The issue was addressed with additional permissions checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. A shortcut may be able to use sensitive data with certain actions without prompting the use...

CVE-2023-23527

CVE-2023-23527 is an Apple OS vulnerability addressed by updates across multiple platforms. The issue allows a user to gain access to protected parts of the file system and is mitigated by patches in macOS Ventura 13.3, macOS Big Sur 11.7.5, macOS Monterey 12.6.4, iOS 16.4, iPadOS 16.4, tvOS 16.4...

CVE-2023-28194

The issue was addressed with improved checks. This issue is fixed in iOS 16.4 and iPadOS 16.4. An app may be able to unexpectedly create a bookmark on the Home Screen...

CVE-2023-27959

The issue was addressed with improved memory handling. This issue is fixed in iOS 16.4 and iPadOS 16.4. An app may be able to execute arbitrary code with kernel privileges...

CVE-2023-23523

CVE-2023-23523 affects Apple devices where Photos in the Hidden Photos Album could be viewed without authentication via Visual Lookup due to a logic issue. The issue is fixed in macOS Ventura 13.3 and in iOS/iPadOS 16.4. The NVD entry notes a local attack vector with user interaction required, an...

CVE-2023-27970

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 16.4 and iPadOS 16.4. An app may be able to execute arbitrary code with kernel privileges...

CVE-2023-28181

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.6 and iPadOS 15.7.6, macOS Monterey 12.6.4, macOS Big Sur 11.7.7, tvOS 16.4, watchOS 9.4. An app may be able to execute arbitrary code with kernel privileges...

CVE-2023-27946

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Ventura 13.3, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution...

CVE-2023-27933

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. An app with root privileges may be able to execute arbitrary code with kernel privileges...

CVE-2023-23527

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Big Sur 11.7.5, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. A user may gain access to protected parts of the file system...

CVE-2023-23543

The issue was addressed with additional restrictions on the observability of app states. This issue is fixed in macOS Ventura 13.3, iOS 15.7.4 and iPadOS 15.7.4, iOS 16.4 and iPadOS 16.4, watchOS 9.4. A sandboxed app may be able to determine which app is currently using the camera...

CVE-2023-27955

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Monterey 12.6.4, tvOS 16.4, macOS Big Sur 11.7.5. An app may be able to read arbitrary files...

CVE-2023-27942

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Big Sur 11.7.5, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. An app may be able to access user-sensitive data...

CVE-2022-46720

CVE-2022-46720 affects Apple platforms (iOS 16.2, iPadOS 16.2, macOS Ventura 13.1). Root cause: integer overflow mitigated by improved input validation in dyld, with the issue described as allowing an app to break out of its sandbox. Impact: sandbox escape if exploited. Exploitation details are n...

PT-2023-21464 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.4 iPadOS versions prior to 16.4 Description: An out-of-bounds write issue was addressed with improved bounds checking, allowing an app to potentially execute arbitrary code with kernel privileges. Recommendations: For...

CVE-2023-27954

CVE-2023-27954 affects WebKitGTK/WebKit2GTK (WebKitGTK/WebKit2GTK family). The publicly cited description indicates that a website may be able to track sensitive user information. Debian LTS and Debian security advisories list CVE-2023-27954 among fixed issues for webkit2gtk, with fixed versions ...

CVE-2023-27970

CVE-2023-27970 refers to an out-of-bounds write in Apple software that could allow an app to execute arbitrary code with kernel privileges. The available connected data specifies the vulnerability as fixed in iOS 16.4 and iPadOS 16.4, with Apple stating that improved bounds checking addresses the...