High WID-SEC-2023-2754 33 CVEs

Apple iOS und Apple iPadOS: Mehrere Schwachstellen

Published Oct 25, 2023 · Updated Feb 22, 2024 · Revision 3 · de-DE

Vendor: Apple Product: iOS Product: iPadOS Platform: iOS

Summary

Ein Angreifer kann mehrere Schwachstellen in Apple iOS und Apple iPadOS ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu verursachen, Sicherheitsmaßnahmen zu umgehen oder vertrauliche Informationen offenzulegen.

Product

Das Apple iOS (vormals iPhone OS) ist das Betriebssystem für das von Apple entwickelte Smartphone iPhone, iPad und iPod Touch.
Das Apple iPadOS ist das Betriebssystem für das von Apple entwickelte iPad.

Vulnerabilities 33

High 8.8

CVE-2023-42852

A logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1, watchOS 10.1, iOS 16…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Oct 25, 2023
High 8.4

CVE-2023-42928

The issue was addressed with improved bounds checks. This issue is fixed in iOS 17.1 and iPadOS 17.1. An app may be abl…

Apple iOS and iPadOS iOS

Feb 21, 2024
High 7.8

CVE-2023-42841

The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.1, iOS 17.1 and iPadOS 17…

Apple macOS iOS and iPadOS macOS iOS

Oct 25, 2023
High 7.8

CVE-2023-42873

The issue was addressed with improved bounds checks. This issue is fixed in macOS Sonoma 14.1, tvOS 17.1, macOS Montere…

Apple macOS iOS and iPadOS tvOS macOS iOS

Feb 21, 2024
High 7.8

CVE-2023-42942

This issue was addressed with improved handling of symlinks. This issue is fixed in watchOS 10.1, macOS Sonoma 14.1, tv…

Apple macOS iOS and iPadOS watchOS macOS iOS

Feb 21, 2024
High 7.5

CVE-2023-40445

The issue was addressed with improved UI handling. This issue is fixed in iOS 17.1 and iPadOS 17.1. A device may persis…

Apple iOS and iPadOS iOS

Oct 25, 2023
High 7.5

CVE-2023-42946

This issue was addressed with improved redaction of sensitive information. This issue is fixed in tvOS 17.1, watchOS 10…

Apple macOS iOS and iPadOS watchOS macOS iOS

Feb 21, 2024
Medium 5.5

CVE-2023-42878

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in watchOS 10.1…

Apple macOS iOS and iPadOS watchOS macOS iOS

Feb 21, 2024
Medium 5.5

CVE-2023-42953

A permissions issue was addressed with additional restrictions. This issue is fixed in tvOS 17.1, watchOS 10.1, macOS S…

Apple macOS iOS and iPadOS watchOS macOS iOS

Feb 21, 2024
Medium 4.6

CVE-2023-42855

This issue was addressed with improved state management. This issue is fixed in iOS 17.1 and iPadOS 17.1. An attacker w…

Apple iOS and iPadOS iOS

Feb 21, 2024
Medium 4.4

CVE-2023-42952

The issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS Ventura 13.6.3, ma…

Apple macOS iOS and iPadOS macOS iOS

Feb 21, 2024
Medium 4.3

CVE-2023-42951

The issue was addressed with improved handling of caches. This issue is fixed in iOS 17.1 and iPadOS 17.1. A user may b…

Apple iOS and iPadOS iOS

Feb 21, 2024
Low 3.3

CVE-2023-42939

A logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1. A user's private bro…

Apple iOS and iPadOS iOS

Feb 21, 2024
Unscored —

CVE-2023-32359

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 16.7.2 and iPadOS…

Apple iOS and iPadOS qtwebkit-source qtwebkit-opensource-src iOS Debian Ubuntu

Oct 25, 2023
Unscored —

CVE-2023-40408

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in macOS Sonoma …

Apple macOS iOS and iPadOS watchOS macOS iOS

Oct 25, 2023
Unscored —

CVE-2023-40413

The issue was addressed with improved handling of caches. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS Monter…

Apple macOS iOS and iPadOS watchOS macOS iOS

Oct 25, 2023
Unscored —

CVE-2023-40416

The issue was addressed with improved memory handling. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS Monterey …

Apple macOS iOS and iPadOS macOS iOS

Oct 25, 2023
Unscored —

CVE-2023-40423

The issue was addressed with improved memory handling. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS Monterey …

Apple macOS iOS and iPadOS macOS iOS

Oct 25, 2023
Unscored —

CVE-2023-40447

The issue was addressed with improved memory handling. This issue is fixed in iOS 17.1 and iPadOS 17.1, watchOS 10.1, i…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers

Oct 25, 2023
Unscored —

CVE-2023-40449

The issue was addressed with improved memory handling. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS Monterey …

Apple macOS iOS and iPadOS macOS iOS

Oct 25, 2023
Unscored —

CVE-2023-41072

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma…

Apple macOS iOS and iPadOS macOS iOS

Oct 25, 2023
Unscored —

CVE-2023-41254

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 17.1 and…

Apple macOS iOS and iPadOS watchOS macOS iOS

Oct 25, 2023
Unscored —

CVE-2023-41976

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17.1 and iPadOS 17.1, …

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers

Oct 25, 2023
Unscored —

CVE-2023-41977

The issue was addressed with improved handling of caches. This issue is fixed in macOS Sonoma 14.1, iOS 16.7.2 and iPad…

Apple macOS iOS and iPadOS macOS iOS

Oct 25, 2023
Unscored —

CVE-2023-41982

This issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sonoma 14.1, w…

Apple macOS iOS and iPadOS watchOS macOS iOS

Oct 25, 2023
Unscored —

CVE-2023-41983

The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.1, Safari 17.1, iOS 16.7.…

Apple macOS iOS and iPadOS Safari macOS iOS Browsers Debian Ubuntu

Oct 25, 2023
Unscored —

CVE-2023-41988

This issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sonoma 14.1, w…

Apple macOS iOS and iPadOS watchOS macOS iOS

Oct 25, 2023
Unscored —

CVE-2023-41997

This issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sonoma 14.1, w…

Apple macOS iOS and iPadOS watchOS macOS iOS

Oct 25, 2023
Unscored —

CVE-2023-42845

An authentication issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14.1, iOS 17.…

Apple macOS iOS and iPadOS macOS iOS

Oct 25, 2023
Unscored —

CVE-2023-42846

This issue was addressed by removing the vulnerable code. This issue is fixed in watchOS 10.1, iOS 16.7.2 and iPadOS 16…

Apple iOS and iPadOS watchOS tvOS iOS

Oct 25, 2023
Unscored —

CVE-2023-42847

A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1. A…

Apple macOS iOS and iPadOS macOS iOS

Oct 25, 2023
Unscored —

CVE-2023-42849

The issue was addressed with improved memory handling. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS Monterey …

Apple macOS iOS and iPadOS watchOS macOS iOS

Oct 25, 2023
Unscored —

CVE-2023-42857

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma…

Apple macOS iOS and iPadOS macOS iOS

Oct 25, 2023

Revision history

2024-02-22 #3
CVE's ergänzt
2024-02-19 #2
CVE ergänzt
2023-10-25 #1
Initiale Fassung

References

Apple Security Advisory HT213981 vom 2023-10-25
https://support.apple.com/en-us/HT213981
Apple Security Advisory HT213982 vom 2023-10-25
https://support.apple.com/en-us/HT213982