Design/Logic Flaw

PendingIntent hijacking in LmsAssemblyTrackerCTC prior to SMR Sep-2023 Release 1 allows local attacker to gain arbitrary file access...

CVE-2023-32426

A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3. An app may be able to gain root privileges...

CVE-2023-32370

A logic issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.3. Content Security Policy to block domains with wildcards may fail...

CVE-2023-32370

A logic issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.3. Content Security Policy to block domains with wildcards may fail...

CVE-2023-28208

A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3. A user may send a text from a secondary eSIM despite configuring a contact to use a primary eSIM...

CVE-2023-29166

A logic issue was addressed with improved state management. This issue is fixed in Pro Video Formats 2.2.5. A user may be able to elevate privileges...

CVE-2023-29166

A logic issue was addressed with improved state management. This issue is fixed in Pro Video Formats 2.2.5. A user may be able to elevate privileges...

Code injection

A logic issue was addressed with improved state management. This issue is fixed in Pro Video Formats 2.2.5. A user may be able to elevate privileges...

Design/Logic Flaw

A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3. An app may be able to gain root privileges...

CVE-2023-32370

A logic issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.3. Content Security Policy to block domains with wildcards may fail...

Input validation

A logic issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.3. Content Security Policy to block domains with wildcards may fail...

Code injection

A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3. A user may send a text from a secondary eSIM despite configuring a contact to use a primary eSIM...

CVE-2023-29166

The CVE-2023-29166 issue affects Apple Pro Video Formats; the vulnerability is a logic issue in state management that may allow a user to elevate privileges. Affected versions prior to 2.2.5 are vulnerable; Apple fixed it in Pro Video Formats 2.2.5. Practical impact is elevated privileges with hi...

CVE-2023-29166

A logic issue was addressed with improved state management. This issue is fixed in Pro Video Formats 2.2.5. A user may be able to elevate privileges...

CVE-2023-29166

A logic issue was addressed with improved state management. This issue is fixed in Pro Video Formats 2.2.5. A user may be able to elevate privileges...

CVE-2023-28208

CVE-2023-28208 describes a logic issue in Apple platforms where a user could send a text from a secondary eSIM even when a contact was configured to use the primary eSIM. Affected: macOS Ventura 13.2, iOS 16.3, and iPadOS 16.3. Impact: potential unauthorized text sending within Messages; CVSS v3....

CVE-2023-28208

A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3. A user may send a text from a secondary eSIM despite configuring a contact to use a primary eSIM...

CVE-2023-28208

A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3. A user may send a text from a secondary eSIM despite configuring a contact to use a primary eSIM...

CVE-2023-32426

CVE-2023-32426 is a logic-issue vulnerability in macOS that could allow a local app to gain root privileges. The CVE is fixed in macOS Ventura 13.3. The primary public reference ties this CVE to the Crash Reporter entry by Junoh Lee (@Theori) and Apple’s 13.3 security content, which describes imp...

CVE-2023-32370

CVE-2023-32370 is a logic issue in WebKitGTK/WebKit CSP handling where the Content Security Policy may fail to block domains with wildcards. The vulnerability is documented as fixed in macOS Ventura 13.3 (CSP wildcard blocking), with related advisories referencing WebKitGTK/WebKit’s CSP logic. Af...