CVE-2023-42916
- EPSS 0.04%
- Published 30.11.2023 23:15:07
- Last modified 29.11.2024 15:03:51
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may disclose sensitive information. Apple is aware of a report that th...
CVE-2023-42917
- EPSS 0.06%
- Published 30.11.2023 23:15:07
- Last modified 10.02.2025 17:55:21
A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may lead to arbitrary code execution. Apple is aware of a report th...
CVE-2023-42861
- EPSS 0.06%
- Published 25.10.2023 19:15:11
- Last modified 21.11.2024 08:23:23
A logic issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14.1. An attacker with knowledge of a standard user's credentials can unlock another standard user's locked screen on the same Mac.
CVE-2023-41977
- EPSS 0.17%
- Published 25.10.2023 19:15:10
- Last modified 21.11.2024 08:22:02
The issue was addressed with improved handling of caches. This issue is fixed in macOS Sonoma 14.1, iOS 16.7.2 and iPadOS 16.7.2. Visiting a malicious website may reveal browsing history.
CVE-2023-41982
- EPSS 0.09%
- Published 25.10.2023 19:15:10
- Last modified 21.11.2024 08:22:02
This issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sonoma 14.1, watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1. An attacker with physical access may be able to use Siri to ac...
CVE-2023-41983
- EPSS 1.11%
- Published 25.10.2023 19:15:10
- Last modified 21.11.2024 08:22:02
The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.1, Safari 17.1, iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1. Processing web content may lead to a denial-of-service.
CVE-2023-41988
- EPSS 0.12%
- Published 25.10.2023 19:15:10
- Last modified 21.11.2024 08:22:03
This issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sonoma 14.1, watchOS 10.1, iOS 17.1 and iPadOS 17.1. An attacker with physical access may be able to use Siri to access sensitive user data.
CVE-2023-41989
- EPSS 0.11%
- Published 25.10.2023 19:15:10
- Last modified 21.11.2024 08:22:03
The issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sonoma 14.1. An attacker may be able to execute arbitrary code as root from the Lock Screen.
CVE-2023-41997
- EPSS 0.09%
- Published 25.10.2023 19:15:10
- Last modified 21.11.2024 08:22:04
This issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sonoma 14.1, watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1. An attacker with physical access may be able to use Siri to ac...
CVE-2023-42438
- EPSS 0.1%
- Published 25.10.2023 19:15:10
- Last modified 21.11.2024 08:22:31
An inconsistent user interface issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14.1. Visiting a malicious website may lead to user interface spoofing.