CVE-2023-35074

CVE-2023-35074 relates to a memory handling issue in WebKit/WebKitGTK used by Apple platforms (tvOS, Safari, watchOS, iOS, iPadOS, macOS Sonoma) and WebKitGTK-based environments. The vendor advisories state that processing web content may lead to arbitrary code execution, and the fix is a memory-...

CVE-2023-35074

The issue was addressed with improved memory handling. This issue is fixed in tvOS 17, Safari 17, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may lead to arbitrary code execution...

CVE-2023-41071

CVE-2023-41071 is a use-after-free vulnerability in Apple’s kernel-related components that can allow an app to execute arbitrary code with kernel privileges. Affected products include tvOS 17, iOS 17 and iPadOS 17, watchOS 10, and macOS Ventura 13.6. The issue is addressed through improved memory...

CVE-2023-41071

A use-after-free issue was addressed with improved memory management. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, macOS Ventura 13.6. An app may be able to execute arbitrary code with kernel privileges...

CVE-2023-41071

A use-after-free issue was addressed with improved memory management. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, macOS Ventura 13.6. An app may be able to execute arbitrary code with kernel privileges...

CVE-2023-41174

The issue was addressed with improved memory handling. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10. An app may be able to execute arbitrary code with kernel privileges...

CVE-2023-41174

CVE-2023-41174 affects Apple platforms: tvOS 17, iOS 17, iPadOS 17, and watchOS 10. The issue stems from improved memory handling and may allow an app to execute arbitrary code with kernel privileges. Affected components are tied to memory handling in the operating systems, leading to potential k...

CVE-2023-40456

The issue was addressed with improved checks. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10. An app may be able to access edited photos saved to a temporary directory...

CVE-2023-40456

CVE-2023-40456 affects Apple platforms (tvOS, iOS, iPadOS, watchOS) where an app may access edited photos saved to a temporary directory due to inadequate access checks. Root cause: insufficient checks in Photos Storage. Impact: potential exposure of edited photos in a temp directory. Mitigation:...

PT-2023-6032 · Apple · Ios +3

Name of the Vulnerable Software and Affected Versions: tvOS versions prior to 17 iOS versions prior to 17 and prior to 16.7 iPadOS versions prior to 17 and prior to 16.7 watchOS versions prior to 10 Description: The issue is related to inadequate access control in the MobileStorageMounter compone...

CVE-2023-40410: Out-of-bounds Read

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.6, tvOS 17, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to disclose kernel memory...

CVE-2023-40409: Undefined Security Weakness

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17. An app may be able to execute arbitrary code with kernel privileges...

CVE-2023-41073: Undefined Security Weakness

An authorization issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to access protected user data...

CVE-2023-41071: Use After Free

A use-after-free issue was addressed with improved memory management. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, macOS Ventura 13.6. An app may be able to execute arbitrary code with kernel privileges...

CVE-2023-41065: Undefined Security Weakness

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. An app may be able to read sensitive location information...

CVE-2023-41063: Undefined Security Weakness

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to execute arbitrary code with kernel privileges...

CVE-2023-32361: Undefined Security Weakness

The issue was addressed with improved handling of caches. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. An app may be able to access user-sensitive data...

CVE-2023-41984: Improper Control of Generation of Code

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to execute arbitrary code with kernel privileges...

PT-2023-6031 · Apple · Ios +3

Name of the Vulnerable Software and Affected Versions: tvOS versions prior to 17 iOS versions prior to 17 iPadOS versions prior to 17 watchOS versions prior to 10 Description: The issue is related to insufficient access control in the Photos Storage of tvOS, iOS, iPadOS, and watchOS operating...

CVE-2023-41174: Undefined Security Weakness

The issue was addressed with improved memory handling. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10. An app may be able to execute arbitrary code with kernel privileges...