CVE-2023-42902
- EPSS 0.04%
- Veröffentlicht 12.12.2023 01:15:11
- Zuletzt bearbeitet 04.11.2025 20:16:55
Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
CVE-2023-42903
- EPSS 0.04%
- Veröffentlicht 12.12.2023 01:15:11
- Zuletzt bearbeitet 04.11.2025 20:16:55
Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
CVE-2023-40446
- EPSS 0.04%
- Veröffentlicht 12.12.2023 01:15:10
- Zuletzt bearbeitet 04.11.2025 20:16:41
The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.7.1, iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1. Processing maliciously crafted input may lead to arbitrary code execution in user-installed a...
CVE-2023-45866
- EPSS 32.02%
- Veröffentlicht 08.12.2023 06:15:45
- Zuletzt bearbeitet 04.11.2025 20:17:09
Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports, potentially permitting injection of HID messages when no user interaction has oc...
CVE-2023-42916
- EPSS 0.05%
- Veröffentlicht 30.11.2023 23:15:07
- Zuletzt bearbeitet 23.10.2025 18:49:53
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may disclose sensitive information. Apple is aware of a report that th...
CVE-2023-42917
- EPSS 0.07%
- Veröffentlicht 30.11.2023 23:15:07
- Zuletzt bearbeitet 23.10.2025 18:49:45
A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may lead to arbitrary code execution. Apple is aware of a report th...
CVE-2023-42861
- EPSS 0.06%
- Veröffentlicht 25.10.2023 19:15:11
- Zuletzt bearbeitet 21.11.2024 08:23:23
A logic issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14.1. An attacker with knowledge of a standard user's credentials can unlock another standard user's locked screen on the same Mac.
CVE-2023-41977
- EPSS 0.17%
- Veröffentlicht 25.10.2023 19:15:10
- Zuletzt bearbeitet 21.11.2024 08:22:02
The issue was addressed with improved handling of caches. This issue is fixed in macOS Sonoma 14.1, iOS 16.7.2 and iPadOS 16.7.2. Visiting a malicious website may reveal browsing history.
CVE-2023-41982
- EPSS 0.07%
- Veröffentlicht 25.10.2023 19:15:10
- Zuletzt bearbeitet 21.11.2024 08:22:02
This issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sonoma 14.1, watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1. An attacker with physical access may be able to use Siri to ac...
CVE-2023-41983
- EPSS 1.11%
- Veröffentlicht 25.10.2023 19:15:10
- Zuletzt bearbeitet 21.11.2024 08:22:02
The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.1, Safari 17.1, iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1. Processing web content may lead to a denial-of-service.