Advisories · Technology

Apple iOS and iPadOS.

Every CVE that names Apple iOS and iPadOS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-42857 CVE record

A privacy issue was addressed with improved private data redaction for log entries.
- Apple macOS
- Apple iOS and iPadOS
Not analysed yet 25 Oct 2023
CVE-2023-42846 CVE record

Information disclosure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple tvOS
- Information disclosure
Not analysed yet 25 Oct 2023
CVE-2023-40416 CVE record

The issue was addressed with improved memory handling.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 25 Oct 2023
CVE-2023-32359 CVE record

This issue was addressed with improved redaction of sensitive information.
- Apple iOS and iPadOS
Not analysed yet 25 Oct 2023
CVE-2023-42847 CVE record

A logic issue was addressed with improved checks.
- Apple macOS
- Apple iOS and iPadOS
Not analysed yet 25 Oct 2023
CVE-2023-42824 CVE record

CVSS 7.8 HighCritical · KEVKEV

The issue was addressed with improved checks.
- Apple iOS and iPadOS
Not analysed yet 4 Oct 2023
CVE-2023-40443 CVE record

The issue was addressed with improved checks.
- Apple iOS and iPadOS
Not analysed yet 26 Sept 2023
CVE-2023-32361 CVE record

The issue was addressed with improved handling of caches.
- Apple iOS and iPadOS
- Apple tvOS
Not analysed yet 26 Sept 2023
CVE-2023-41073 CVE record

An authorization issue was addressed with improved state management.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 26 Sept 2023
CVE-2023-41065 CVE record

A privacy issue was addressed with improved private data redaction for log entries.
- Apple iOS and iPadOS
- Apple tvOS
Not analysed yet 26 Sept 2023
CVE-2023-40434 CVE record

A configuration issue was addressed with additional restrictions.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 26 Sept 2023
CVE-2023-41232 CVE record

An out-of-bounds read was addressed with improved bounds checking.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 26 Sept 2023
CVE-2023-40419 CVE record

CVSS 7.8 High

The issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple tvOS
Not analysed yet 26 Sept 2023
CVE-2023-40399 CVE record

The issue was addressed with improved memory handling.
- Apple iOS and iPadOS
- Apple tvOS
Not analysed yet 26 Sept 2023
CVE-2023-41984 CVE record

Code injection in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Code injection
Not analysed yet 26 Sept 2023
CVE-2023-41068 CVE record

CVSS 7.8 High

An access issue was addressed with improved access restrictions.
- Apple iOS and iPadOS
- Apple tvOS
Not analysed yet 26 Sept 2023
CVE-2023-40454 CVE record

A permissions issue was addressed with additional restrictions.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 26 Sept 2023
CVE-2023-40403 CVE record

The issue was addressed with improved memory handling.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 26 Sept 2023
CVE-2023-40395 CVE record

The issue was addressed with improved handling of caches.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 26 Sept 2023
CVE-2023-41063 CVE record

CVSS 7.8 High

The issue was addressed with improved memory handling.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 26 Sept 2023
CVE-2023-40520 CVE record

The issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple tvOS
Not analysed yet 26 Sept 2023
CVE-2023-40432 CVE record

CVSS 7.8 High

The issue was addressed with improved memory handling.
- Apple iOS and iPadOS
- Apple tvOS
Not analysed yet 26 Sept 2023
CVE-2023-40424 CVE record

The issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 26 Sept 2023
CVE-2023-41995 CVE record

A use-after-free issue was addressed with improved memory management.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 26 Sept 2023
CVE-2023-40384 CVE record

A permissions issue was addressed with improved redaction of sensitive information.
- Apple iOS and iPadOS
- Apple tvOS
Not analysed yet 26 Sept 2023
CVE-2023-40412 CVE record

CVSS 7.8 High

The issue was addressed with improved memory handling.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 26 Sept 2023
CVE-2023-35990 CVE record

Incorrect authorization in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Broken access control
Not analysed yet 26 Sept 2023
CVE-2023-40428 CVE record

The issue was addressed with improved handling of caches.
- Apple iOS and iPadOS
Not analysed yet 26 Sept 2023
CVE-2023-40429 CVE record

A permissions issue was addressed with improved validation.
- Apple iOS and iPadOS
- Apple tvOS
Not analysed yet 26 Sept 2023
CVE-2023-39434 CVE record

CVSS 8.8 High

Use after free in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 26 Sept 2023
CVE-2023-40452 CVE record

The issue was addressed with improved bounds checks.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 26 Sept 2023
CVE-2023-40448 CVE record

The issue was addressed with improved handling of protocols.
- Apple iOS and iPadOS
- Apple tvOS
Not analysed yet 26 Sept 2023
CVE-2023-41074 CVE record

CVSS 8.8 High

Code injection in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple tvOS
- Code injection
Not analysed yet 26 Sept 2023
CVE-2023-40409 CVE record

CVSS 7.8 High

The issue was addressed with improved memory handling.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 26 Sept 2023
CVE-2023-35984 CVE record

The issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple tvOS
Not analysed yet 26 Sept 2023
CVE-2023-40410 CVE record

An out-of-bounds read was addressed with improved input validation.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 26 Sept 2023
CVE-2023-41981 CVE record

The issue was addressed with improved memory handling.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 26 Sept 2023
CVE-2023-40391 CVE record

The issue was addressed with improved memory handling.
- Apple iOS and iPadOS
- Apple Xcode
Not analysed yet 26 Sept 2023
CVE-2023-41980 CVE record

A permissions issue was addressed with additional restrictions.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 26 Sept 2023
CVE-2023-40431 CVE record

CVSS 7.8 High

The issue was addressed with improved memory handling.
- Apple iOS and iPadOS
Not analysed yet 26 Sept 2023
CVE-2023-40427 CVE record

The issue was addressed with improved handling of caches.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 26 Sept 2023
CVE-2023-32396 CVE record

CVSS 7.8 High

This issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple Xcode
Not analysed yet 26 Sept 2023
CVE-2023-41968 CVE record

This issue was addressed with improved validation of symlinks.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 26 Sept 2023
CVE-2023-40441 CVE record

A resource exhaustion issue was addressed with improved input validation.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 26 Sept 2023
CVE-2023-40400 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

This issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple tvOS
Not analysed yet 26 Sept 2023
CVE-2023-38596 CVE record

The issue was addressed with improved handling of protocols.
- Apple iOS and iPadOS
- Apple tvOS
Not analysed yet 26 Sept 2023
CVE-2023-40420 CVE record

The issue was addressed with improved memory handling.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 26 Sept 2023
CVE-2023-35074 CVE record

CVSS 8.8 High

The issue was addressed with improved memory handling.
- Apple iOS and iPadOS
- Apple tvOS
Not analysed yet 26 Sept 2023
CVE-2023-41071 CVE record

CVSS 7.8 High

Use after free in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 26 Sept 2023
CVE-2023-41070 CVE record

A logic issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 26 Sept 2023
CVE-2023-41174 CVE record

The issue was addressed with improved memory handling.
- Apple iOS and iPadOS
- Apple tvOS
Not analysed yet 26 Sept 2023
CVE-2023-40456 CVE record

The issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple tvOS
Not analysed yet 26 Sept 2023
CVE-2023-41986 CVE record

The issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 26 Sept 2023
CVE-2023-40417 CVE record

A window management issue was addressed with improved state management.
- Apple iOS and iPadOS
- Apple Safari
Not analysed yet 26 Sept 2023
CVE-2023-41992 CVE record

CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Improper check for unusual conditions in Apple macOS and others
- Apple macOS
- Apple iOS and iPadOS
- CWE-754
Not analysed yet 21 Sept 2023
CVE-2023-41991 CVE record

CVSS 5.5 MediumCritical · KEVKEV

Improper certificate validation in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Weak cryptography or TLS
Not analysed yet 21 Sept 2023
CVE-2023-40442 CVE record

A privacy issue was addressed with improved private data redaction for log entries.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 11 Sept 2023
CVE-2023-41990 CVE record

CVSS 7.8 HighCritical · KEVKEV

The issue was addressed with improved handling of caches.
- Apple iOS and iPadOS
- Apple tvOS
Not analysed yet 11 Sept 2023
CVE-2023-41064 CVE record

CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Buffer overflow in Apple macOS and others
- Apple macOS
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 7 Sept 2023
CVE-2023-41061 CVE record

CVSS 7.8 HighCritical · KEVKEV

Improper input validation in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple watchOS
- CWE-20
Not analysed yet 7 Sept 2023