Advisories · Technology

Apple iOS and iPadOS.

Every CVE that names Apple iOS and iPadOS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-23543 CVE record

CVSS 3.6 Low

The issue was addressed with additional restrictions on the observability of app states.
- Apple macOS
- Apple iOS and iPadOS
Not analysed yet 8 May 2023
CVE-2023-23541 CVE record

CVSS 3.3 Low

Insecure storage of sensitive information in Apple iOS and iPadOS
- Apple iOS and iPadOS
- Information disclosure
Not analysed yet 8 May 2023
CVE-2023-23540 CVE record

CVSS 7.8 High

The issue was addressed with improved memory handling.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 8 May 2023
CVE-2023-23537 CVE record

CVSS 5.5 Medium

A privacy issue was addressed with improved private data redaction for log entries.
- Apple macOS
- Apple iOS and iPadOS
Not analysed yet 8 May 2023
CVE-2023-23536 CVE record

CVSS 7.8 High

The issue was addressed with improved bounds checks.
- Apple macOS
- Apple iOS and iPadOS
Not analysed yet 8 May 2023
CVE-2023-23535 CVE record

CVSS 5.5 Medium

Buffer overflow in Apple macOS and others
- Apple macOS
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 8 May 2023
CVE-2023-23532 CVE record

CVSS 8.8 High

This issue was addressed with improved checks.
- Apple macOS
- Apple iOS and iPadOS
Not analysed yet 8 May 2023
CVE-2023-23528 CVE record

An out-of-bounds read was addressed with improved bounds checking.
- Apple iOS and iPadOS
- Apple tvOS
Not analysed yet 8 May 2023
CVE-2023-23527 CVE record

CVSS 5.5 Medium

The issue was addressed with improved checks.
- Apple macOS
- Apple iOS and iPadOS
Not analysed yet 8 May 2023
CVE-2023-23526 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Apple macOS: This was addressed with additional checks by Gatekeeper on files downloaded from an…
- Apple macOS
- Apple iOS and iPadOS
Not analysed yet 8 May 2023
CVE-2023-23525 CVE record

CVSS 7.8 High

This issue was addressed with improved checks.
- Apple macOS
- Apple iOS and iPadOS
Not analysed yet 8 May 2023
CVE-2023-23523 CVE record

CVSS 3.3 Low

A logic issue was addressed with improved restrictions.
- Apple macOS
- Apple iOS and iPadOS
Not analysed yet 8 May 2023
CVE-2023-23494 CVE record

CVSS 5.3 Medium

Buffer overflow in Apple iOS and iPadOS
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 8 May 2023
CVE-2023-28206 CVE record

CVSS 8.6 HighCritical · KEV, CVSS 7+ and EPSSKEV

Out-of-bounds write in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 10 Apr 2023
CVE-2023-28205 CVE record

CVSS 8.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Use after free in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple Safari
- Memory corruption
Not analysed yet 10 Apr 2023
CVE-2022-46717 CVE record

CVSS 2.4 Low

A logic issue was addressed with improved restrictions.
- Apple iOS and iPadOS
Not analysed yet 10 Apr 2023
CVE-2023-23531 CVE record

CVSS 8.6 High

Out-of-bounds write in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 27 Feb 2023
CVE-2023-23530 CVE record

CVSS 8.6 High

The issue was addressed with improved memory handling.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 27 Feb 2023
CVE-2023-23529 CVE record

CVSS 8.8 HighCritical · KEVKEV

Type confusion in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple Safari
- Memory corruption
Not analysed yet 27 Feb 2023
CVE-2023-23524 CVE record

CVSS 7.5 High

Uncontrolled resource consumption in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple watchOS
- Denial of service
Not analysed yet 27 Feb 2023
CVE-2023-23520 CVE record

CVSS 5.9 Medium

Time-of-check time-of-use race condition in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple tvOS
- Race condition
Not analysed yet 27 Feb 2023
CVE-2023-23519 CVE record

CVSS 7.5 High

Out-of-bounds write in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple tvOS
- Memory corruption
Not analysed yet 27 Feb 2023
CVE-2023-23518 CVE record

CVSS 8.8 High

Out-of-bounds write in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple tvOS
- Memory corruption
Not analysed yet 27 Feb 2023
CVE-2023-23517 CVE record

CVSS 8.8 High

Buffer overflow in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple tvOS
- Memory corruption
Not analysed yet 27 Feb 2023
CVE-2023-23514 CVE record

CVSS 7.8 High

Use after free in Apple macOS and others
- Apple macOS
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 27 Feb 2023
CVE-2023-23512 CVE record

The issue was addressed with improved handling of caches.
- Apple iOS and iPadOS
- Apple tvOS
Not analysed yet 27 Feb 2023
CVE-2023-23511 CVE record

Information disclosure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple tvOS
- Information disclosure
Not analysed yet 27 Feb 2023
CVE-2023-23505 CVE record

CVSS 3.3 Low

Sensitive information in log files in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
Not analysed yet 27 Feb 2023
CVE-2023-23504 CVE record

CVSS 7.8 High

Out-of-bounds write in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple tvOS
- Memory corruption
Not analysed yet 27 Feb 2023
CVE-2023-23503 CVE record

Authentication bypass in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple tvOS
- Authentication bypass
Not analysed yet 27 Feb 2023
CVE-2023-23502 CVE record

Out-of-bounds read in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple tvOS
- Memory corruption
Not analysed yet 27 Feb 2023
CVE-2023-23500 CVE record

Information disclosure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple tvOS
- Information disclosure
Not analysed yet 27 Feb 2023
CVE-2023-23499 CVE record

Information disclosure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple tvOS
- Information disclosure
Not analysed yet 27 Feb 2023
CVE-2023-23498 CVE record

A logic issue was addressed with improved state management.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 27 Feb 2023
CVE-2023-23496 CVE record

Code injection in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple tvOS
- Code injection
Not analysed yet 27 Feb 2023
CVE-2022-32949 CVE record

CVSS 7.8 High

Improper privilege management in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple tvOS
- Privilege escalation
Not analysed yet 27 Feb 2023
CVE-2022-32855 CVE record

Information disclosure in Apple iOS and iPadOS
- Apple iOS and iPadOS
- Information disclosure
Not analysed yet 27 Feb 2023
CVE-2022-32784 CVE record

Information disclosure in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Information disclosure
Not analysed yet 27 Feb 2023
CVE-2022-26760 CVE record

A memory corruption issue was addressed with improved state management.
- Apple iOS and iPadOS
Not analysed yet 27 Feb 2023
CVE-2022-46702 CVE record

CVSS 5.5 Medium

Information disclosure in Apple iOS and iPadOS
- Apple iOS and iPadOS
- Information disclosure
Not analysed yet 15 Dec 2022
CVE-2022-42850 CVE record

CVSS 7.8 High

Out-of-bounds write in Apple iOS and iPadOS
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 15 Dec 2022
CVE-2022-42846 CVE record

CVSS 5.5 Medium

Buffer overflow in Apple iOS and iPadOS
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 15 Dec 2022
CVE-2022-42844 CVE record

CVSS 8.6 High

Buffer overflow in Apple iOS and iPadOS
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 15 Dec 2022
CVE-2022-42827 CVE record

CVSS 7.8 HighCritical · KEVKEV

Out-of-bounds write in Apple iOS and iPadOS
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 1 Nov 2022
CVE-2022-42817 CVE record

CVSS 6.5 Medium

Information disclosure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple watchOS
- Information disclosure
Not analysed yet 1 Nov 2022
CVE-2022-32946 CVE record

CVSS 5.5 Medium

Improper access control in Apple iOS and iPadOS
- Apple iOS and iPadOS
- Broken access control
Not analysed yet 1 Nov 2022
CVE-2022-32939 CVE record

CVSS 7.8 High

Buffer overflow in Apple iOS and iPadOS
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 1 Nov 2022
CVE-2022-32932 CVE record

CVSS 7.8 High

Out-of-bounds write in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple watchOS
- Memory corruption
Not analysed yet 1 Nov 2022
CVE-2022-32929 CVE record

CVSS 5.5 Medium

Incorrect permission assignment in Apple iOS and iPadOS
- Apple iOS and iPadOS
- Broken access control
Not analysed yet 1 Nov 2022
CVE-2022-32927 CVE record

CVSS 7.5 High

Uncontrolled resource consumption in Apple iOS and iPadOS
- Apple iOS and iPadOS
- Denial of service
Not analysed yet 1 Nov 2022
CVE-2020-36521 CVE record

CVSS 7.1 High

Out-of-bounds read in Apple iTunes for Windows and others
- Apple iTunes for Windows
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 23 Sept 2022
CVE-2022-32912 CVE record

CVSS 8.8 High

Out-of-bounds read in Apple iOS and others
- Apple iOS
- Apple Safari
- Memory corruption
Not analysed yet 20 Sept 2022
CVE-2022-32886 CVE record

CVSS 8.8 High

Out-of-bounds write in Apple iOS and others
- Apple iOS
- Apple Safari
- Memory corruption
Not analysed yet 20 Sept 2022
CVE-2022-32872 CVE record

CVSS 2.4 Low

Improper access control in Apple iOS and others
- Apple iOS
- Apple iOS and iPadOS
- Broken access control
Not analysed yet 20 Sept 2022
CVE-2022-32868 CVE record

A logic issue was addressed with improved state management.
- Apple iOS
- Apple Safari
Not analysed yet 20 Sept 2022
CVE-2022-32795 CVE record

This issue was addressed with improved checks.
- Apple iOS
- Apple iOS and iPadOS
Not analysed yet 20 Sept 2022
CVE-2022-32894 CVE record

CVSS 7.8 HighCritical · KEVKEV

Out-of-bounds write in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 24 Aug 2022
CVE-2022-32893 CVE record

CVSS 8.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Out-of-bounds write in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 24 Aug 2022
CVE-2022-26703 CVE record

An authorization issue was addressed with improved state management.
- Apple iOS and iPadOS
Not analysed yet 26 May 2022
CVE-2022-22675 CVE record

CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Out-of-bounds write in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 26 May 2022