Show filters
399 Total Results
Displaying 11-20 of 399
Sort by:
Attacker Value
Unknown
CVE-2024-23254
Disclosure Date: March 08, 2024 (last updated December 21, 2024)
The issue was addressed with improved UI handling. This issue is fixed in tvOS 17.4, macOS Sonoma 14.4, visionOS 1.1, iOS 17.4 and iPadOS 17.4, watchOS 10.4, Safari 17.4. A malicious website may exfiltrate audio data cross-origin.
0
Attacker Value
Unknown
CVE-2023-42843
Disclosure Date: February 21, 2024 (last updated December 21, 2024)
An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1, Safari 17.1, macOS Sonoma 14.1. Visiting a malicious website may lead to address bar spoofing.
0
Attacker Value
Unknown
CVE-2023-42917
Disclosure Date: November 30, 2023 (last updated June 27, 2024)
A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.
0
Attacker Value
Unknown
CVE-2023-39928
Disclosure Date: October 06, 2023 (last updated October 21, 2023)
A use-after-free vulnerability exists in the MediaRecorder API of Webkit WebKitGTK 2.40.5. A specially crafted web page can abuse this vulnerability to cause memory corruption and potentially arbitrary code execution. A user would need to to visit a malicious webpage to trigger this vulnerability.
0
Attacker Value
Unknown
CVE-2023-41993
Disclosure Date: September 21, 2023 (last updated December 21, 2024)
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.
0
Attacker Value
Unknown
CVE-2023-40397
Disclosure Date: September 06, 2023 (last updated October 15, 2023)
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.5. A remote attacker may be able to cause arbitrary javascript code execution.
0
Attacker Value
Unknown
CVE-2023-32370
Disclosure Date: September 06, 2023 (last updated October 15, 2023)
A logic issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.3. Content Security Policy to block domains with wildcards may fail.
0
Attacker Value
Unknown
CVE-2023-28198
Disclosure Date: August 14, 2023 (last updated October 15, 2023)
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 16.4 and iPadOS 16.4, macOS Ventura 13.3. Processing web content may lead to arbitrary code execution.
0
Attacker Value
Unknown
CVE-2023-37450
Disclosure Date: July 27, 2023 (last updated June 28, 2024)
The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, Safari 16.5.2, tvOS 16.6, macOS Ventura 13.5, watchOS 9.6. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.
0
Attacker Value
Unknown
CVE-2023-32439
Disclosure Date: June 23, 2023 (last updated January 24, 2025)
A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5.1 and iPadOS 16.5.1, iOS 15.7.7 and iPadOS 15.7.7, macOS Ventura 13.4.1, Safari 16.5.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.
0
