CVE-2023-27942

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Big Sur 11.7.5, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. An app may be able to access user-sensitive data...

CVE-2023-27955

CVE-2023-27955 : The issue is fixed in macOS Ventura 13.3, iOS 16.4, iPadOS 16.4, macOS Monterey 12.6.4, tvOS 16.4, and macOS Big Sur 11.7.5. Description states that an app may be able to read arbitrary files; underlying cause is unspecified in the provided documents beyond that it was addressed ...

CVE-2023-23527

CVE-2023-23527 is an Apple OS vulnerability addressed by updates across multiple platforms. The issue allows a user to gain access to protected parts of the file system and is mitigated by patches in macOS Ventura 13.3, macOS Big Sur 11.7.5, macOS Monterey 12.6.4, iOS 16.4, iPadOS 16.4, tvOS 16.4...

CVE-2023-27932

CVE-2023-27932 affects WebKitGTK/WebKitGTK-based WebKit implementations (notably WebKit2GTK) and is a Same Origin Policy bypass via processing malicious web content. Public advisories in Debian, Fedora, and AlmaLinux confirm this CVE is fixed by updates to webkit2gtk/webkitgtk components (e.g., D...

CVE-2023-28181

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.6 and iPadOS 15.7.6, macOS Monterey 12.6.4, macOS Big Sur 11.7.7, tvOS 16.4, watchOS 9.4. An app may be able to execute arbitrary code with kernel privileges...

CVE-2023-23535

CVE-2023-23535 affects Apple operating systems, with the vulnerability in ImageIO-related memory handling that may cause disclosure of process memory when processing a malicious image. Affected products/versions include macOS Monterey 12.6.6, macOS Big Sur 11.7.5, macOS Ventura 13.3, iOS 15.7.4/i...

CVE-2023-23536: Undefined Security Weakness

The issue was addressed with improved bounds checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Big Sur 11.7.5, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. An app may be able to execute arbitrary code with kernel privileges...

CVE-2023-27933

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. An app with root privileges may be able to execute arbitrary code with kernel privileges...

CVE-2023-27963

CVE-2023-27963 concerns Apple platforms where a shortcut may access sensitive data with certain actions without user prompts. The issue was addressed via additional permissions checks and is fixed in: macOS Ventura 13.3; macOS Monterey 12.6.4; iOS 16.4 and iPadOS 16.4; iOS 15.7.4 and iPadOS 15.7....

CVE-2023-27956

The CVE-2023-27956 issue concerns the FontParser component on Apple platforms. It describes a memory handling flaw that, when processing a maliciously crafted image, could disclose process memory. Affected products/versions include macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPad...

CVE-2023-28181

CVE-2023-28181 affects Apple platforms (notably CoreCapture and Kernel-related components) with a memory handling flaw that could allow an app to execute arbitrary code with kernel privileges. The issue is fixed in macOS Ventura 13.3, iOS 16.4 / iPadOS 16.4, iOS 15.7.6 / iPadOS 15.7.6, macOS Mont...

CVE-2023-27954

CVE-2023-27954 affects WebKitGTK/WebKit2GTK (WebKitGTK/WebKit2GTK family). The publicly cited description indicates that a website may be able to track sensitive user information. Debian LTS and Debian security advisories list CVE-2023-27954 among fixed issues for webkit2gtk, with fixed versions ...

CVE-2023-27969

CVE-2023-27969 is a use-after-free kernel vulnerability in Apple platforms. The issue could allow an app to execute arbitrary code with kernel privileges via a local attack, fixed in macOS Ventura 13.3, iOS 16.4 / iPadOS 16.4, and iOS 15.7.4 / iPadOS 15.7.4, as well as tvOS 16.4 and watchOS 9.4. ...

CVE-2023-27954

The issue was addressed by removing origin information. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, tvOS 16.4, watchOS 9.4. A website may be able to track sensitive user information...

CVE-2023-27937

CVE-2023-27937 describes an integer overflow that was mitigated using improved input validation. The issue affects multiple Apple platforms and versions, where parsing a maliciously crafted plist can cause an app to terminate or execute arbitrary code. Affected software includes macOS Ventura 13....

CVE-2023-27954: Incorrect Authorization

The issue was addressed by removing origin information. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, tvOS 16.4, watchOS 9.4. A website may be able to track sensitive user information...

CVE-2023-27942

CVE-2023-27942 affects Apple platforms (macOS, iOS, iPadOS, tvOS, watchOS). The issue involved an app potentially accessing user‑sensitive data due to insufficient checks; Apple addressed it with improved checks. The fix is listed for macOS Ventura 13.3, macOS Big Sur 11.7.5, macOS Monterey 12.6....

CVE-2023-27931

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.3, iOS 16.4 and iPadOS 16.4, macOS Big Sur 11.7.3, tvOS 16.4, watchOS 9.4. An app may be able to access user-sensitive data...

CVE-2023-27928

The CVE-2023-27928 vulnerability concerns a privacy issue where private data redaction for log entries was insufficient, potentially allowing an app to access information about a user’s contacts. Affected products and versions include: macOS Big Sur 11.7.5; macOS Ventura 13.3; iOS 15.7.4 and iOS ...

CVE-2023-28201

This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, tvOS 16.4. A remote user may be able to cause unexpected app termination or arbitrary code execution...