Advisories · Technology

Apple iOS and iPadOS.

Every CVE that names Apple iOS and iPadOS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-23284 CVE record

CVSS 6.5 Medium

Protection mechanism failure in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- CWE-693
Not analysed yet 8 Mar 2024
CVE-2024-23226 CVE record

CVSS 8.8 High

Out-of-bounds write in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 8 Mar 2024
CVE-2024-23288 CVE record

CVSS 8.4 High

This issue was addressed by removing the vulnerable code.
- Apple iOS and iPadOS
- Apple macOS
- Privilege escalation
Not analysed yet 8 Mar 2024
CVE-2024-23231 CVE record

CVSS 3.3 Low

A privacy issue was addressed with improved private data redaction for log entries.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 8 Mar 2024
CVE-2024-23289 CVE record

CVSS 5.5 Medium

A lock screen issue was addressed with improved state management.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 8 Mar 2024
CVE-2024-23270 CVE record

CVSS 7.8 High

Out-of-bounds write in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 8 Mar 2024
CVE-2024-23250 CVE record

CVSS 5.5 Medium

Incorrect authorization in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Broken access control
Not analysed yet 8 Mar 2024
CVE-2024-23246 CVE record

CVSS 8.1 High

Improper input validation in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- CWE-20
Not analysed yet 8 Mar 2024
CVE-2024-23293 CVE record

CVSS 4.6 Medium

This issue was addressed through improved state management.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 8 Mar 2024
CVE-2024-23220 CVE record

CVSS 4.0 Medium

The issue was addressed with improved handling of caches.
- Apple iOS and iPadOS
- Apple visionOS
Not analysed yet 8 Mar 2024
CVE-2023-28826 CVE record

CVSS 5.5 Medium

Information disclosure in Apple macOS and others
- Apple macOS
- Apple iOS and iPadOS
- Information disclosure
Not analysed yet 8 Mar 2024
CVE-2024-23277 CVE record

CVSS 5.9 Medium

The issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 8 Mar 2024
CVE-2024-23241 CVE record

CVSS 6.5 Medium

Insecure storage of sensitive information in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
Not analysed yet 8 Mar 2024
CVE-2024-23257 CVE record

CVSS 3.3 Low

Buffer overflow in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 8 Mar 2024
CVE-2024-23201 CVE record

CVSS 6.2 Medium

Incorrect default permissions in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Broken access control
Not analysed yet 8 Mar 2024
CVE-2024-23240 CVE record

CVSS 2.4 Low

The issue was addressed with improved checks.
- Apple iOS and iPadOS
Not analysed yet 8 Mar 2024
CVE-2024-23283 CVE record

CVSS 6.2 Medium

A privacy issue was addressed with improved private data redaction for log entries.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 8 Mar 2024
CVE-2024-23243 CVE record

CVSS 4.3 Medium

A privacy issue was addressed with improved private data redaction for log entries.
- Apple iOS and iPadOS
Not analysed yet 5 Mar 2024
CVE-2024-23296 CVE record

CVSS 7.8 HighCritical · KEVKEV

Out-of-bounds write in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 5 Mar 2024
CVE-2024-23225 CVE record

CVSS 7.8 HighCritical · KEVKEV

Out-of-bounds write in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 5 Mar 2024
CVE-2024-23256 CVE record

CVSS 2.4 Low

A logic issue was addressed with improved state management.
- Apple iOS and iPadOS
Not analysed yet 5 Mar 2024
CVE-2023-42848 CVE record

CVSS 7.8 High

Heap-based buffer overflow in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple tvOS
- Memory corruption
Not analysed yet 21 Feb 2024
CVE-2023-42873 CVE record

CVSS 7.8 High

Out-of-bounds write in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple tvOS
- Memory corruption
Not analysed yet 21 Feb 2024
CVE-2023-42823 CVE record

CVSS 2.7 Low

Insecure storage of sensitive information in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple tvOS
- Information disclosure
Not analysed yet 21 Feb 2024
CVE-2023-42878 CVE record

CVSS 5.5 Medium

Insecure storage of sensitive information in Apple macOS and others
- Apple macOS
- Apple watchOS
- Information disclosure
Not analysed yet 21 Feb 2024
CVE-2023-42839 CVE record

CVSS 6.2 Medium

Insecure storage of sensitive information in Apple tvOS and others
- Apple tvOS
- Apple macOS
- Information disclosure
Not analysed yet 21 Feb 2024
CVE-2023-42946 CVE record

CVSS 7.5 High

This issue was addressed with improved redaction of sensitive information.
- Apple tvOS
- Apple macOS
Not analysed yet 21 Feb 2024
CVE-2023-42855 CVE record

CVSS 4.6 Medium

This issue was addressed with improved state management.
- Apple iOS and iPadOS
Not analysed yet 21 Feb 2024
CVE-2023-42951 CVE record

CVSS 4.3 Medium

The issue was addressed with improved handling of caches.
- Apple iOS and iPadOS
Not analysed yet 21 Feb 2024
CVE-2023-42843 CVE record

CVSS 7.5 High

Authentication bypass by spoofing in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple Safari
- Authentication bypass
Not analysed yet 21 Feb 2024
CVE-2023-42834 CVE record

CVSS 6.2 Medium

A privacy issue was addressed with improved handling of files.
- Apple macOS
- Apple watchOS
Not analysed yet 21 Feb 2024
CVE-2023-42952 CVE record

CVSS 4.4 Medium

Improper privilege management in Apple macOS and others
- Apple macOS
- Apple iOS and iPadOS
- Privilege escalation
Not analysed yet 21 Feb 2024
CVE-2023-42928 CVE record

CVSS 8.4 High

Incorrect default permissions in Apple iOS and iPadOS
- Apple iOS and iPadOS
- Broken access control
Not analysed yet 21 Feb 2024
CVE-2023-42953 CVE record

CVSS 5.5 Medium

A permissions issue was addressed with additional restrictions.
- Apple tvOS
- Apple macOS
Not analysed yet 21 Feb 2024
CVE-2023-42836 CVE record

CVSS 5.3 Medium

A logic issue was addressed with improved checks.
- Apple macOS
- Apple iOS and iPadOS
Not analysed yet 21 Feb 2024
CVE-2023-42942 CVE record

CVSS 7.8 High

Symlink following in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple tvOS
- Path traversal
Not analysed yet 21 Feb 2024
CVE-2023-42939 CVE record

CVSS 3.3 Low

A logic issue was addressed with improved checks.
- Apple iOS and iPadOS
- CWE-841
Not analysed yet 21 Feb 2024
CVE-2024-23218 CVE record

CVSS 5.9 Medium

Observable discrepancy in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
Not analysed yet 23 Jan 2024
CVE-2024-23222 CVE record

CVSS 8.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Type confusion in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 23 Jan 2024
CVE-2023-42937 CVE record

CVSS 5.5 Medium

Sensitive information in log files in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
Not analysed yet 23 Jan 2024
CVE-2024-23214 CVE record

CVSS 8.8 High

Out-of-bounds write in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 23 Jan 2024
CVE-2024-23215 CVE record

CVSS 5.5 Medium

An issue was addressed with improved handling of temporary files.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 23 Jan 2024
CVE-2024-23203 CVE record

CVSS 7.5 High

The issue was addressed with additional permissions checks.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 23 Jan 2024
CVE-2024-23223 CVE record

CVSS 6.2 Medium

Incorrect permission assignment in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Broken access control
Not analysed yet 23 Jan 2024
CVE-2024-23219 CVE record

CVSS 6.2 Medium

Improper authentication in Apple iOS and iPadOS
- Apple iOS and iPadOS
- Authentication bypass
Not analysed yet 23 Jan 2024
CVE-2024-23204 CVE record

CVSS 7.5 High

The issue was addressed with additional permissions checks.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 23 Jan 2024
CVE-2024-23212 CVE record

CVSS 7.8 High

The issue was addressed with improved memory handling.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 23 Jan 2024
CVE-2024-23208 CVE record

CVSS 7.8 High

Code injection in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Code injection
Not analysed yet 23 Jan 2024
CVE-2024-23213 CVE record

CVSS 8.8 High

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 23 Jan 2024
CVE-2024-23210 CVE record

CVSS 3.3 Low

Sensitive information in log files in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
Not analysed yet 23 Jan 2024
CVE-2024-23206 CVE record

CVSS 6.5 Medium

Information disclosure in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Information disclosure
Not analysed yet 23 Jan 2024
CVE-2024-23207 CVE record

CVSS 5.5 Medium

Information disclosure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
Not analysed yet 23 Jan 2024
CVE-2024-23211 CVE record

CVSS 3.3 Low

Exposure of personal information in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Information disclosure
Not analysed yet 23 Jan 2024
CVE-2023-40528 CVE record

CVSS 5.5 Medium

Improper access control in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Broken access control
Not analysed yet 23 Jan 2024
CVE-2023-42888 CVE record

CVSS 5.5 Medium

Information disclosure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
Not analysed yet 23 Jan 2024
CVE-2024-23217 CVE record

CVSS 3.3 Low

Insecure storage of sensitive information in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
Not analysed yet 23 Jan 2024
CVE-2023-40394 CVE record

CVSS 3.3 Low

Improper input validation in Apple iOS and iPadOS
- Apple iOS and iPadOS
- CWE-20
Not analysed yet 10 Jan 2024
CVE-2023-41069 CVE record

CVSS 5.5 Medium

Authentication bypass by spoofing in Apple iOS and iPadOS
- Apple iOS and iPadOS
- Authentication bypass
Not analysed yet 10 Jan 2024
CVE-2023-40414 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Use after free in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple tvOS
- Memory corruption
Not analysed yet 10 Jan 2024
CVE-2023-40438 CVE record

CVSS 5.5 Medium

An issue was addressed with improved handling of temporary files.
- Apple iOS and iPadOS
- Apple macOS
- CWE-379
Not analysed yet 10 Jan 2024