High 2 exploited CVEs WID-SEC-2023-3095 23 CVEs

Apple iOS und iPadOS: Mehrere Schwachstellen

Published Dec 11, 2023 · Updated Mar 25, 2024 · Revision 3 · de-DE

Vendor: Apple Product: iOS Product: iPadOS Platform: iOS

Summary

Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in Apple iOS und Apple iPadOS ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu verursachen, vertrauliche Informationen offenzulegen oder Sicherheitsmaßnahmen zu umgehen.

Product

Das Apple iOS (vormals iPhone OS) ist das Betriebssystem für das von Apple entwickelte Smartphone iPhone, iPad und iPod Touch.
Das Apple iPadOS ist das Betriebssystem für das von Apple entwickelte iPad.

Vulnerabilities 23

High 8.8

CVE-2023-42917 Exploited

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.…

Apple macOS iOS and iPadOS Safari macOS iOS Browsers Debian Ubuntu Wolfi

Nov 30, 2023
KEV Dec 4, 2023
Medium 6.5

CVE-2023-42916 Exploited EPSS 18%

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2…

Apple macOS iOS and iPadOS Safari macOS iOS Browsers Debian Ubuntu

Nov 30, 2023
KEV Dec 4, 2023
High 8.8

CVE-2023-42950

A use after free issue was addressed with improved memory management. This issue is fixed in Safari 17.2, iOS 17.2 and …

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu Wolfi

Mar 28, 2024
High 8.6

CVE-2023-42947

A path handling issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.7.2, macOS Ventu…

Apple macOS iOS and iPadOS watchOS macOS iOS

Mar 28, 2024
High 7.5

CVE-2023-42962

This issue was addressed with improved checks This issue is fixed in iOS 17.2 and iPadOS 17.2, iOS 16.7.3 and iPadOS 16…

Apple iOS and iPadOS iOS

Mar 28, 2024
High 7.0

CVE-2023-42974

A race condition was addressed with improved state handling. This issue is fixed in macOS Monterey 12.7.2, macOS Ventur…

Apple macOS iOS and iPadOS macOS iOS

Mar 28, 2024
Medium 6.5

CVE-2023-42956

The issue was addressed with improved memory handling. This issue is fixed in Safari 17.2, iOS 17.2 and iPadOS 17.2, ma…

Apple macOS iOS and iPadOS Safari macOS iOS Browsers Debian Ubuntu

Mar 28, 2024
Medium 5.5

CVE-2023-42884

This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sonoma 14.2, iO…

Apple macOS iOS and iPadOS tvOS macOS iOS

Dec 12, 2023
Medium 5.5

CVE-2023-42893

A permissions issue was addressed by removing vulnerable code and adding additional checks. This issue is fixed in macO…

Apple macOS iOS and iPadOS watchOS macOS iOS

Mar 28, 2024
Medium 5.5

CVE-2023-42896

An issue was addressed with improved handling of temporary files. This issue is fixed in macOS Monterey 12.7.2, macOS V…

Apple macOS iOS and iPadOS macOS iOS

Mar 28, 2024
Medium 5.5

CVE-2023-42936

This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Monterey 12.7.2…

Apple macOS iOS and iPadOS watchOS macOS iOS

Mar 28, 2024
Medium 4.8

CVE-2023-42941

The issue was addressed with improved checks. This issue is fixed in iOS 17.2 and iPadOS 17.2. An attacker in a privile…

Apple iOS and iPadOS iOS

Jan 10, 2024
Unscored —

CVE-2023-42883

The issue was addressed with improved memory handling. This issue is fixed in Safari 17.2, macOS Sonoma 14.2, iOS 17.2 …

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Dec 12, 2023
Unscored —

CVE-2023-42890

The issue was addressed with improved memory handling. This issue is fixed in Safari 17.2, macOS Sonoma 14.2, watchOS 1…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Dec 12, 2023
Unscored —

CVE-2023-42897

The issue was addressed with improved checks. This issue is fixed in iOS 17.2 and iPadOS 17.2. An attacker with physica…

Apple iOS and iPadOS iOS

Dec 12, 2023
Unscored —

CVE-2023-42898

The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.2, watchOS 10.2, iOS 17.2…

Apple macOS iOS and iPadOS watchOS macOS iOS

Dec 12, 2023
Unscored —

CVE-2023-42899

The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.2, iOS 17.2 and iPadOS 17…

Apple macOS iOS and iPadOS watchOS macOS iOS

Dec 12, 2023
Unscored —

CVE-2023-42914

The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.2, iOS 17.2 and iPadOS 17…

Apple macOS iOS and iPadOS watchOS macOS iOS

Dec 12, 2023
Unscored —

CVE-2023-42919

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma…

Apple macOS iOS and iPadOS watchOS macOS iOS

Dec 12, 2023
Unscored —

CVE-2023-42922

This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sonoma 14.2, iO…

Apple macOS iOS and iPadOS macOS iOS

Dec 12, 2023
Unscored —

CVE-2023-42923

This issue was addressed through improved state management. This issue is fixed in iOS 17.2 and iPadOS 17.2. Private Br…

Apple iOS and iPadOS iOS

Dec 12, 2023
Unscored —

CVE-2023-42927 Rejected

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Dec 12, 2023
Unscored —

CVE-2023-45866 Public exploit

Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encr…

bluez bluez bluez Debian Ubuntu Azure Linux

Dec 8, 2023

Revision history

2024-03-25 #3
CVE's ergänzt
2024-01-22 #2
Neue Updates von Apple aufgenommen
2023-12-11 #1
Initiale Fassung

References

Apple security update vom 2023-12-11
https://support.apple.com/kb/HT214034
Apple security update vom 2023-12-11
https://support.apple.com/kb/HT214035
Apple Security Advisory HT214062 vom 2024-01-22
https://support.apple.com/en-us/HT214062