CVE-2023-41968

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Ventura 13.6, tvOS 17, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to read arbitrary files...

CVE-2023-32396

The CVE-2023-32396 issue affects Apple platforms and is fixed in Xcode 15, tvOS 17, watchOS 10, iOS 17, iPadOS 17, and macOS Sonoma 14. The description states that an app may be able to gain elevated privileges and that the fix involved improved checks. No additional attack vectors or exploit det...

CVE-2023-40441

A resource exhaustion issue was addressed with improved input validation. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may lead to a denial-of-service...

CVE-2023-40441

CVE-2023-40441 describes a resource-exhaustion (DoS) issue caused by processing web content, mitigated by improved input validation. The fixed versions are: iOS 17, iPadOS 17, and macOS Sonoma 14. The vulnerability affects Apple devices when handling web content (GPU/WebGL contexts) and can lead ...

CVE-2023-40441

A resource exhaustion issue was addressed with improved input validation. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may lead to a denial-of-service...

CVE-2023-40400

This issue was addressed with improved checks. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. A remote user may cause an unexpected app termination or arbitrary code execution...

CVE-2023-40400

This issue was addressed with improved checks. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. A remote user may cause an unexpected app termination or arbitrary code execution...

CVE-2023-40400

CVE-2023-40400 : Apple fixed this issue in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, and macOS Sonoma 14 by adding improved checks. The vulnerability could allow a remote user to cause an app to terminate unexpectedly or execute arbitrary code. The description notes this as a remote-attack possi...

CVE-2023-38596

CVE-2023-38596: Apple fixed a protocol handling issue that allowed an app to fail to enforce App Transport Security. Affected products include tvOS 17, iOS 17 and iPadOS 17, watchOS 10, and macOS Sonoma 14. Root cause: insufficient protocol handling in CFNetwork/App Transport Security logic. Reme...

CVE-2023-38596

The issue was addressed with improved handling of protocols. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. An app may fail to enforce App Transport Security...

CVE-2023-38596

The issue was addressed with improved handling of protocols. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. An app may fail to enforce App Transport Security...

CVE-2023-40420

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may lead to a denial-of-service...

CVE-2023-40420

CVE-2023-40420 affects Apple platforms where processing web content may cause a DoS due to a memory-handling issue. The entry states the vulnerability is fixed in macOS Ventura 13.6, macOS Monterey 12.7, macOS Sonoma 14, tvOS 17, iOS 16.7 and iPadOS 16.7, iOS 17 and iPadOS 17, and watchOS 10. Exp...

CVE-2023-40420

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may lead to a denial-of-service...

CVE-2023-35074

CVE-2023-35074 relates to a memory handling issue in WebKit/WebKitGTK used by Apple platforms (tvOS, Safari, watchOS, iOS, iPadOS, macOS Sonoma) and WebKitGTK-based environments. The vendor advisories state that processing web content may lead to arbitrary code execution, and the fix is a memory-...

CVE-2023-35074

The issue was addressed with improved memory handling. This issue is fixed in tvOS 17, Safari 17, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may lead to arbitrary code execution...

CVE-2023-41071

CVE-2023-41071 is a use-after-free vulnerability in Apple’s kernel-related components that can allow an app to execute arbitrary code with kernel privileges. Affected products include tvOS 17, iOS 17 and iPadOS 17, watchOS 10, and macOS Ventura 13.6. The issue is addressed through improved memory...

CVE-2023-41070

A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.6, iOS 16.7 and iPadOS 16.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to access sensitive data logged when a user shares a link...

CVE-2023-41071

A use-after-free issue was addressed with improved memory management. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, macOS Ventura 13.6. An app may be able to execute arbitrary code with kernel privileges...

CVE-2023-41070

CVE-2023-41070 is an Apple vulnerability: a logic issue in the sharing flow could allow an app to access sensitive data logged when a user shares a link. Affected products include macOS (Ventura 13.6 and Sonoma 14), iOS (16.7 and 17), iPadOS (16.7 and 17), and watchOS (10). The issue is fixed in ...