Apple Ios 16.5 And Ipados vulnerabilities

CVE-2023-32403 [MEDIUM] CVE-2023-32403: iOS 16.5 and iPadOS 16.5 Apple Security Update: About the security content of iOS 16.5 and iPadOS 16.5 Product: iOS 16.5 and iPadOS Version: 16.5 CVE: CVE-2023-32403 Component: NetworkExtension Impact: An app may be able to read sensitive location information Description: This issue was addressed with improved redaction of sensitive information.

CVE-2023-32368 [MEDIUM] CVE-2023-32368: iOS 16.5 and iPadOS 16.5 Apple Security Update: About the security content of iOS 16.5 and iPadOS 16.5 Product: iOS 16.5 and iPadOS Version: 16.5 CVE: CVE-2023-32368 Component: Model I/O Impact: Processing a 3D model may result in disclosure of process memory Description: An out-of-bounds read was addressed with improved input validation.

CVE-2023-32392 [MEDIUM] CVE-2023-32392: iOS 16.5 and iPadOS 16.5 Apple Security Update: About the security content of iOS 16.5 and iPadOS 16.5 Product: iOS 16.5 and iPadOS Version: 16.5 CVE: CVE-2023-32392 Component: GeoServices Impact: An app may be able to read sensitive location information Description: A privacy issue was addressed with improved private data redaction for log entries.

CVE-2023-32408 [MEDIUM] CVE-2023-32408: iOS 16.5 and iPadOS 16.5 Apple Security Update: About the security content of iOS 16.5 and iPadOS 16.5 Product: iOS 16.5 and iPadOS Version: 16.5 CVE: CVE-2023-32408 Component: TV App Impact: An app may be able to read sensitive location information Description: The issue was addressed with improved handling of caches.

CVE-2023-32372 [MEDIUM] CVE-2023-32372: iOS 16.5 and iPadOS 16.5 Apple Security Update: About the security content of iOS 16.5 and iPadOS 16.5 Product: iOS 16.5 and iPadOS Version: 16.5 CVE: CVE-2023-32372 Component: ImageIO Impact: Processing an image may result in disclosure of process memory Description: An out-of-bounds read was addressed with improved input validation.

CVE-2023-32388 [MEDIUM] CVE-2023-32388: iOS 16.5 and iPadOS 16.5 Apple Security Update: About the security content of iOS 16.5 and iPadOS 16.5 Product: iOS 16.5 and iPadOS Version: 16.5 CVE: CVE-2023-32388 Component: Accessibility Impact: An app may be able to bypass Privacy preferences Description: A privacy issue was addressed with improved private data redaction for log entries.

CVE-2023-28202 [MEDIUM] CVE-2023-28202: iOS 16.5 and iPadOS 16.5 Apple Security Update: About the security content of iOS 16.5 and iPadOS 16.5 Product: iOS 16.5 and iPadOS Version: 16.5 CVE: CVE-2023-28202 Component: System Settings Impact: An app firewall setting may not take effect after exiting the Settings app Description: This issue was addressed with improved state management.

CVE-2023-32432 [MEDIUM] CVE-2023-32432: iOS 16.5 and iPadOS 16.5 Apple Security Update: About the security content of iOS 16.5 and iPadOS 16.5 Product: iOS 16.5 and iPadOS Version: 16.5 CVE: CVE-2023-32432 Component: Share Sheet Impact: An app may be able to access user-sensitive data Description: A privacy issue was addressed with improved handling of temporary files.

CVE-2023-28191 [MEDIUM] CVE-2023-28191: iOS 16.5 and iPadOS 16.5 Apple Security Update: About the security content of iOS 16.5 and iPadOS 16.5 Product: iOS 16.5 and iPadOS Version: 16.5 CVE: CVE-2023-28191 Component: CoreServices Impact: An app may be able to bypass Privacy preferences Description: This issue was addressed with improved redaction of sensitive information.

CVE-2023-32371 [MEDIUM] CVE-2023-32371: iOS 16.5 and iPadOS 16.5 Apple Security Update: About the security content of iOS 16.5 and iPadOS 16.5 Product: iOS 16.5 and iPadOS Version: 16.5 CVE: CVE-2023-32371 Component: Associated Domains Impact: An app may be able to break out of its sandbox Description: The issue was addressed with improved checks.

CVE-2023-32354 [MEDIUM] CVE-2023-32354: iOS 16.5 and iPadOS 16.5 Apple Security Update: About the security content of iOS 16.5 and iPadOS 16.5 Product: iOS 16.5 and iPadOS Version: 16.5 CVE: CVE-2023-32354 Component: IOSurfaceAccelerator Impact: An app may be able to disclose kernel memory Description: An out-of-bounds read was addressed with improved input validation.

CVE-2023-32389 [MEDIUM] CVE-2023-32389: iOS 16.5 and iPadOS 16.5 Apple Security Update: About the security content of iOS 16.5 and iPadOS 16.5 Product: iOS 16.5 and iPadOS Version: 16.5 CVE: CVE-2023-32389 Component: Wi-Fi Impact: An app may be able to disclose kernel memory Description: This issue was addressed with improved redaction of sensitive information.

CVE-2023-32411 [MEDIUM] CVE-2023-32411: iOS 16.5 and iPadOS 16.5 Apple Security Update: About the security content of iOS 16.5 and iPadOS 16.5 Product: iOS 16.5 and iPadOS Version: 16.5 CVE: CVE-2023-32411 Component: AppleMobileFileIntegrity Impact: An app may be able to bypass Privacy preferences Description: This issue was addressed with improved entitlements.

CVE-2023-32367 [MEDIUM] CVE-2023-32367: iOS 16.5 and iPadOS 16.5 Apple Security Update: About the security content of iOS 16.5 and iPadOS 16.5 Product: iOS 16.5 and iPadOS Version: 16.5 CVE: CVE-2023-32367 Component: Security Impact: An app may be able to access user-sensitive data Description: This issue was addressed with improved entitlements.

CVE-2023-32352 [MEDIUM] CVE-2023-32352: iOS 16.5 and iPadOS 16.5 Apple Security Update: About the security content of iOS 16.5 and iPadOS 16.5 Product: iOS 16.5 and iPadOS Version: 16.5 CVE: CVE-2023-32352 Component: LaunchServices Impact: An app may bypass Gatekeeper checks Description: A logic issue was addressed with improved checks.

CVE-2023-32422 [MEDIUM] CVE-2023-32422: iOS 16.5 and iPadOS 16.5 Apple Security Update: About the security content of iOS 16.5 and iPadOS 16.5 Product: iOS 16.5 and iPadOS Version: 16.5 CVE: CVE-2023-32422 Component: SQLite Impact: An app may be able to bypass Privacy preferences Description: This issue was addressed by adding additional SQLite logging restrictions.

CVE-2023-32415 [MEDIUM] CVE-2023-32415: iOS 16.5 and iPadOS 16.5 Apple Security Update: About the security content of iOS 16.5 and iPadOS 16.5 Product: iOS 16.5 and iPadOS Version: 16.5 CVE: CVE-2023-32415 Component: Weather Impact: An app may be able to read sensitive location information Description: This issue was addressed with improved redaction of sensitive information.

CVE-2023-32376 [MEDIUM] CVE-2023-32376: iOS 16.5 and iPadOS 16.5 Apple Security Update: About the security content of iOS 16.5 and iPadOS 16.5 Product: iOS 16.5 and iPadOS Version: 16.5 CVE: CVE-2023-32376 Component: StorageKit Impact: An app may be able to modify protected parts of the file system Description: This issue was addressed with improved entitlements.

CVE-2023-32404 [MEDIUM] CVE-2023-32404: iOS 16.5 and iPadOS 16.5 Apple Security Update: About the security content of iOS 16.5 and iPadOS 16.5 Product: iOS 16.5 and iPadOS Version: 16.5 CVE: CVE-2023-32404 Component: Shortcuts Impact: An app may be able to bypass Privacy preferences Description: This issue was addressed with improved entitlements.

CVE-2023-32399 [MEDIUM] CVE-2023-32399: iOS 16.5 and iPadOS 16.5 Apple Security Update: About the security content of iOS 16.5 and iPadOS 16.5 Product: iOS 16.5 and iPadOS Version: 16.5 CVE: CVE-2023-32399 Component: Core Location Impact: An app may be able to read sensitive location information Description: The issue was addressed with improved handling of caches.