Medium WID-SEC-2023-0190 19 CVEs

Apple iOS/iPadOS: Mehrere Schwachstellen

Published Jan 23, 2023 · Updated Sep 7, 2023 · Revision 3 · de-DE

Vendor: Apple Product: iOS Product: iOS < 15.7.3 Product: iOS < 16.3 Product: iPadOS Product: iPadOS < 15.7.3 Product: iPadOS < 16.3 Platform: iOS

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apple iOS und Apple iPadOS ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuführen.

Product

Das Apple iOS (vormals iPhone OS) ist das Betriebssystem für das von Apple entwickelte Smartphone iPhone, iPad und iPod Touch.
Das Apple iPadOS ist das Betriebssystem für das von Apple entwickelte iPad.

Vulnerabilities 19

High 8.8

CVE-2023-23517

The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Feb 27, 2023
High 8.8

CVE-2023-23518

The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Feb 27, 2023
High 8.6

CVE-2023-23530

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.2, iOS 16.3 and iPadOS 1…

Apple macOS iOS and iPadOS macOS iOS

Feb 27, 2023
High 8.6

CVE-2023-23531 Public exploit

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.2, iOS 16.3 and iPadOS 1…

Apple macOS iOS and iPadOS macOS iOS

Feb 27, 2023
High 7.8

CVE-2023-23504

The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2…

Apple macOS iOS and iPadOS watchOS macOS iOS

Feb 27, 2023
High 7.5

CVE-2023-23519

A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 9.3, tvOS 16.3, …

Apple macOS iOS and iPadOS watchOS macOS iOS

Feb 27, 2023
Medium 5.9

CVE-2023-23520

A race condition was addressed with additional validation. This issue is fixed in watchOS 9.3, tvOS 16.3, macOS Ventura…

Apple macOS iOS and iPadOS watchOS macOS iOS

Feb 27, 2023
Low 3.3

CVE-2023-23505

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Monter…

Apple macOS iOS and iPadOS watchOS macOS iOS

Feb 27, 2023
Unscored —

CVE-2023-23496

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.2, watchOS 9.3, iOS 15.7.2 and iP…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers

Feb 27, 2023
Unscored —

CVE-2023-23498

A logic issue was addressed with improved state management. This issue is fixed in iOS 15.7.3 and iPadOS 15.7.3, macOS …

Apple macOS iOS and iPadOS macOS iOS

Feb 27, 2023
Unscored —

CVE-2023-23499

This issue was addressed by enabling hardened runtime. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2…

Apple macOS iOS and iPadOS watchOS macOS iOS

Feb 27, 2023
Unscored —

CVE-2023-23500

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.2, iOS 16.3 and iPadOS 1…

Apple macOS iOS and iPadOS watchOS macOS iOS

Feb 27, 2023
Unscored —

CVE-2023-23502

An information disclosure issue was addressed by removing the vulnerable code. This issue is fixed in macOS Monterey 12…

Apple macOS iOS and iPadOS watchOS macOS iOS

Feb 27, 2023
Unscored —

CVE-2023-23503

A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.2, iOS 16.3 and iPa…

Apple macOS iOS and iPadOS watchOS macOS iOS

Feb 27, 2023
Unscored —

CVE-2023-23511

The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2…

Apple macOS iOS and iPadOS watchOS macOS iOS

Feb 27, 2023
Unscored —

CVE-2023-23512

The issue was addressed with improved handling of caches. This issue is fixed in watchOS 9.3, tvOS 16.3, macOS Ventura …

Apple macOS iOS and iPadOS watchOS macOS iOS

Feb 27, 2023
Unscored —

CVE-2023-28208

A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.2, iOS 16.3 and iPa…

Apple macOS iOS and iPadOS macOS iOS

Sep 6, 2023
Unscored —

CVE-2023-32393

The issue was addressed with improved memory handling. This issue is fixed in watchOS 9.3, tvOS 16.3, macOS Ventura 13.…

Apple macOS iOS and iPadOS watchOS macOS iOS Debian Ubuntu

Jul 27, 2023
Unscored —

CVE-2023-32438

This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in tvOS 16.3, macOS …

Apple macOS iOS and iPadOS watchOS macOS iOS

Sep 6, 2023

Revision history

2023-09-07 #3
CVE's ergänzt
2023-02-21 #2
CVE-2023-23520, CVE-2023-23530, CVE-2023-23531 ergänzt
2023-01-23 #1
Initiale Fassung

References

Apple Security Advisory HT213598 vom 2023-01-23
https://support.apple.com/en-us/HT213598
Apple Security Advisory HT213606 vom 2023-01-23
https://support.apple.com/en-us/HT213606