Apple Ios 16.4 And Ipados vulnerabilities

CVE-2023-23537 [MEDIUM] CVE-2023-23537: iOS 16.4 and iPadOS 16.4 Apple Security Update: About the security content of iOS 16.4 and iPadOS 16.4 Product: iOS 16.4 and iPadOS Version: 16.4 CVE: CVE-2023-23537 Component: Find My Impact: An app may be able to read sensitive location information Description: A privacy issue was addressed with improved private data redaction for log entries.

CVE-2023-27943 [MEDIUM] CVE-2023-27943: iOS 16.4 and iPadOS 16.4 Apple Security Update: About the security content of iOS 16.4 and iPadOS 16.4 Product: iOS 16.4 and iPadOS Version: 16.4 CVE: CVE-2023-27943 Component: LaunchServices Impact: Files downloaded from the internet may not have the quarantine flag applied Description: This issue was addressed with improved checks.

CVE-2023-28178 [MEDIUM] CVE-2023-28178: iOS 16.4 and iPadOS 16.4 Apple Security Update: About the security content of iOS 16.4 and iPadOS 16.4 Product: iOS 16.4 and iPadOS Version: 16.4 CVE: CVE-2023-28178 Component: Sandbox Impact: An app may be able to bypass Privacy preferences Description: A logic issue was addressed with improved validation.

CVE-2023-28185 [MEDIUM] CVE-2023-28185: iOS 16.4 and iPadOS 16.4 Apple Security Update: About the security content of iOS 16.4 and iPadOS 16.4 Product: iOS 16.4 and iPadOS Version: 16.4 CVE: CVE-2023-28185 Component: Kernel Impact: An app may be able to cause a denial-of-service Description: An integer overflow was addressed through improved input validation.

CVE-2022-46725 [MEDIUM] CVE-2022-46725: iOS 16.4 and iPadOS 16.4 Apple Security Update: About the security content of iOS 16.4 and iPadOS 16.4 Product: iOS 16.4 and iPadOS Version: 16.4 CVE: CVE-2022-46725 Component: WebKit Impact: Visiting a malicious website may lead to address bar spoofing Description: A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation.

CVE-2023-23543 [LOW] CVE-2023-23543: iOS 16.4 and iPadOS 16.4 Apple Security Update: About the security content of iOS 16.4 and iPadOS 16.4 Product: iOS 16.4 and iPadOS Version: 16.4 CVE: CVE-2023-23543 Component: Camera Impact: A sandboxed app may be able to determine which app is currently using the camera Description: The issue was addressed with additional restrictions on the observability of app states.

CVE-2023-23523 [LOW] CVE-2023-23523: iOS 16.4 and iPadOS 16.4 Apple Security Update: About the security content of iOS 16.4 and iPadOS 16.4 Product: iOS 16.4 and iPadOS Version: 16.4 CVE: CVE-2023-23523 Component: Photos Impact: Photos belonging to the Hidden Photos Album could be viewed without authentication through Visual Lookup Description: A logic issue was addressed with improved restrictions.

CVE-2023-27928 [LOW] CVE-2023-27928: iOS 16.4 and iPadOS 16.4 Apple Security Update: About the security content of iOS 16.4 and iPadOS 16.4 Product: iOS 16.4 and iPadOS Version: 16.4 CVE: CVE-2023-27928 Component: Identity Services Impact: An app may be able to access information about a user’s contacts Description: A privacy issue was addressed with improved private data redaction for log entries.

CVE-2023-28194 [LOW] CVE-2023-28194: iOS 16.4 and iPadOS 16.4 Apple Security Update: About the security content of iOS 16.4 and iPadOS 16.4 Product: iOS 16.4 and iPadOS Version: 16.4 CVE: CVE-2023-28194 Component: Safari Impact: An app may be able to unexpectedly create a bookmark on the Home Screen Description: The issue was addressed with improved checks.

CVE-2023-28195 [LOW] CVE-2023-28195: iOS 16.4 and iPadOS 16.4 Apple Security Update: About the security content of iOS 16.4 and iPadOS 16.4 Product: iOS 16.4 and iPadOS Version: 16.4 CVE: CVE-2023-28195 Component: Find My Impact: An app may be able to read sensitive location information Description: A privacy issue was addressed with improved private data redaction for log entries.

CVE-2023-42830 [LOW] CVE-2023-42830: iOS 16.4 and iPadOS 16.4 Apple Security Update: About the security content of iOS 16.4 and iPadOS 16.4 Product: iOS 16.4 and iPadOS Version: 16.4 CVE: CVE-2023-42830 Component: App Store Impact: An app may be able to read sensitive location information Description: A privacy issue was addressed with improved private data redaction for log entries.

CVE-2023-23541 [LOW] CVE-2023-23541: iOS 16.4 and iPadOS 16.4 Apple Security Update: About the security content of iOS 16.4 and iPadOS 16.4 Product: iOS 16.4 and iPadOS Version: 16.4 CVE: CVE-2023-23541 Component: Accessibility Impact: An app may be able to access information about a user’s contacts Description: A privacy issue was addressed with improved private data redaction for log entries.

CVE-2022-46724 [LOW] CVE-2022-46724: iOS 16.4 and iPadOS 16.4 Apple Security Update: About the security content of iOS 16.4 and iPadOS 16.4 Product: iOS 16.4 and iPadOS Version: 16.4 CVE: CVE-2022-46724 Component: Magnifier Impact: A person with physical access to an iOS device may be able to view the last image used in Magnifier from the lock screen Description: This issue was addressed by restricting options offered on a locked device.