CVE-2022-26760

CVE-2022-26760 is a memory corruption issue in Apple's Wi‑Fi stack that was addressed with improved state management. Affected products are iOS and iPadOS; fixed in iOS 15.5 / iPadOS 15.5. Remediation: update to the 15.5 (or later) releases. Exploitation details are not provided in the supplied d...

CVE-2023-23504

The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, watchOS 9.3, iOS 15.7.3 and iPadOS 15.7.3, tvOS 16.3, iOS 16.3 and iPadOS 16.3. An app may be able to execute arbitrary code with kernel privileges...

CVE-2023-23511

The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3, tvOS 16.3, watchOS 9.3. An app may be able to bypass Privacy preferences...

CVE-2023-23505

CVE-2023-23505 describes a privacy issue where an app could access information about a user’s contacts due to insufficient private data redaction in log entries. Affected products include Apple platforms: macOS Monterey 12.6.3, macOS Ventura 13.2, macOS Big Sur 11.7.3, watchOS 9.3, iOS 15.7.3 and...

CVE-2023-23529

A type confusion issue was addressed with improved checks. This issue is fixed in iOS 15.7.4 and iPadOS 15.7.4, iOS 16.3.1 and iPadOS 16.3.1, macOS Ventura 13.2.1, Safari 16.3. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this...

CVE-2023-23530

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3. An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges...

CVE-2023-23500

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3, iOS 15.7.3 and iPadOS 15.7.3, tvOS 16.3, watchOS 9.3. An app may be able to leak sensitive kernel state...

CVE-2023-23531

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3. An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges...

CVE-2022-46705

CVE-2022-46705 is a spoofing vulnerability in the handling of URLs that can enable address-bar spoofing when visiting a malicious site. The initial description notes improved input validation and lists affected platforms (Apple products) with fixes in iOS 16.2, iPadOS 16.2, macOS Ventura 13.1, an...

CVE-2023-23499

The CVE-2023-23499 issue is addressed by enabling hardened runtime and is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, watchOS 9.3, macOS Big Sur 11.7.3, tvOS 16.3, iOS 16.3, and iPadOS 16.3. Affects Apple platforms where an app could access user-sensitive data, as stated in multiple sourc...

CVE-2023-23519

The CVE-2023-23519 entry describes a memory corruption issue that affects Apple operating systems when processing images, as stated in multiple sources. Affected components are not enumerated beyond general OS updates, but the vulnerability is addressed by fixes in watchOS 9.3, tvOS 16.3, macOS V...

CVE-2023-23514

CVE-2023-23514 is a macOS kernel-use-after-free vulnerability. In macOS Ventura 13.3 (and related updates) the issue was addressed by improved memory management, fixing a flaw that could allow an app to execute arbitrary code with kernel privileges. Public references in Apple advisories show the ...

CVE-2023-23498

CVE-2023-23498 pertains to a logic issue in Apple's software stack where improved state management fixes an issue that could cause the quoted original message to be selected from the wrong email when forwarding an Exchange message. Affected platforms include iOS 15.7.3/iPadOS 15.7.3, iOS 16.3/iPa...

CVE-2022-32830

CVE-2022-32830 is an out-of-bounds read vulnerability in ImageIO affecting tvOS/iOS/iPadOS up to version 15.6; exploitation through processing a malicious image could disclose user information. Other Apple components listed in tvOS 15.6/ iOS 15.6/ iPadOS 15.6 have separate CVEs. Remediation: upda...

Apple macOS Ventura 安全漏洞

Apple macOS Ventura is a desktop operating system from Apple Inc. in the United States. A security vulnerability exists in Apple macOS Ventura versions prior to 13.2, iOS versions prior to 16.3, and iPadOS versions prior to 16.3, which stems from the presence of a race condition, and which could ...

CVE-2022-46705

A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, Safari 16.2. Visiting a malicious website may lead to address bar spoofing...

CVE-2022-42826

CVE-2022-42826 is a use-after-free vulnerability in WebKitGTK/WebKitGTK2/WebKitGTK-based WebKit, caused by improper memory management that could allow arbitrary code execution when processing malicious web content. The CVE entry is supported by multiple connected reports: Apple advisories state t...

CVE-2023-23529

CVE-2023-23529 is a type confusion vulnerability in WebKit/WebKitGTK that could allow arbitrary code execution when processing malicious web content. Apple’s advisory covers iOS/iPadOS/macOS/Safari patches (iOS 15.7.4, 16.3.1, macOS Ventura 13.2.1, Safari 16.3) and notes active exploitation repor...

CVE-2022-26760

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 15.5 and iPadOS 15.5. A malicious application may be able to elevate privileges...

CVE-2023-23519

A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 9.3, tvOS 16.3, macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3. Processing an image may lead to a denial-of-service...