Apple Ios 17.1 And Ipados vulnerabilities

CVE-2023-40413 [MEDIUM] CVE-2023-40413: iOS 17.1 and iPadOS 17.1 Apple Security Update: About the security content of iOS 17.1 and iPadOS 17.1 Product: iOS 17.1 and iPadOS Version: 17.1 CVE: CVE-2023-40413 Component: Find My Impact: An app may be able to read sensitive location information Description: The issue was addressed with improved handling of caches.

CVE-2023-41254 [MEDIUM] CVE-2023-41254: iOS 17.1 and iPadOS 17.1 Apple Security Update: About the security content of iOS 17.1 and iPadOS 17.1 Product: iOS 17.1 and iPadOS Version: 17.1 CVE: CVE-2023-41254 Component: Weather Impact: An app may be able to access sensitive user data Description: A privacy issue was addressed with improved private data redaction for log entries.

CVE-2023-42823 [MEDIUM] CVE-2023-42823: iOS 17.1 and iPadOS 17.1 Apple Security Update: About the security content of iOS 17.1 and iPadOS 17.1 Product: iOS 17.1 and iPadOS Version: 17.1 CVE: CVE-2023-42823 Component: CVE-2023-42823

CVE-2023-42834 [MEDIUM] CVE-2023-42834: iOS 17.1 and iPadOS 17.1 Apple Security Update: About the security content of iOS 17.1 and iPadOS 17.1 Product: iOS 17.1 and iPadOS Version: 17.1 CVE: CVE-2023-42834 Component: Find My Impact: An app may be able to access sensitive user data Description: A privacy issue was addressed with improved handling of files.

CVE-2023-42946 [MEDIUM] CVE-2023-42946: iOS 17.1 and iPadOS 17.1 Apple Security Update: About the security content of iOS 17.1 and iPadOS 17.1 Product: iOS 17.1 and iPadOS Version: 17.1 CVE: CVE-2023-42946 Component: CVE-2023-42946

CVE-2023-41072 [MEDIUM] CVE-2023-41072: iOS 17.1 and iPadOS 17.1 Apple Security Update: About the security content of iOS 17.1 and iPadOS 17.1 Product: iOS 17.1 and iPadOS Version: 17.1 CVE: CVE-2023-41072 Component: Contacts Impact: An app may be able to access sensitive user data Description: A privacy issue was addressed with improved private data redaction for log entries.

CVE-2023-42878 [MEDIUM] CVE-2023-42878: iOS 17.1 and iPadOS 17.1 Apple Security Update: About the security content of iOS 17.1 and iPadOS 17.1 Product: iOS 17.1 and iPadOS Version: 17.1 CVE: CVE-2023-42878 Component: Share Sheet Impact: An app may be able to access sensitive user data Description: A privacy issue was addressed with improved private data redaction for log entries.

CVE-2023-42953 [MEDIUM] CVE-2023-42953: iOS 17.1 and iPadOS 17.1 Apple Security Update: About the security content of iOS 17.1 and iPadOS 17.1 Product: iOS 17.1 and iPadOS Version: 17.1 CVE: CVE-2023-42953 Component: Game Center Impact: An app may be able to access sensitive user data Description: A permissions issue was addressed with additional restrictions.

CVE-2023-42839 [MEDIUM] CVE-2023-42839: iOS 17.1 and iPadOS 17.1 Apple Security Update: About the security content of iOS 17.1 and iPadOS 17.1 Product: iOS 17.1 and iPadOS Version: 17.1 CVE: CVE-2023-42839 Component: Sandbox Impact: An app may be able to access sensitive user data Description: This issue was addressed with improved state management.

CVE-2023-40449 [MEDIUM] CVE-2023-40449: iOS 17.1 and iPadOS 17.1 Apple Security Update: About the security content of iOS 17.1 and iPadOS 17.1 Product: iOS 17.1 and iPadOS Version: 17.1 CVE: CVE-2023-40449 Component: CoreAnimation Impact: An app may be able to cause a denial-of-service Description: The issue was addressed with improved memory handling.

CVE-2023-41982 [MEDIUM] CVE-2023-41982: iOS 17.1 and iPadOS 17.1 Apple Security Update: About the security content of iOS 17.1 and iPadOS 17.1 Product: iOS 17.1 and iPadOS Version: 17.1 CVE: CVE-2023-41982 Component: Siri Impact: An attacker with physical access may be able to use Siri to access sensitive user data Description: This issue was addressed by restricting options offered on a locked device.

CVE-2023-41997 [MEDIUM] CVE-2023-41997: iOS 17.1 and iPadOS 17.1 Apple Security Update: About the security content of iOS 17.1 and iPadOS 17.1 Product: iOS 17.1 and iPadOS Version: 17.1 CVE: CVE-2023-41997 Component: Siri Impact: An attacker with physical access may be able to use Siri to access sensitive user data Description: This issue was addressed by restricting options offered on a locked device.

CVE-2023-42843 [MEDIUM] CVE-2023-42843: iOS 17.1 and iPadOS 17.1 Apple Security Update: About the security content of iOS 17.1 and iPadOS 17.1 Product: iOS 17.1 and iPadOS Version: 17.1 CVE: CVE-2023-42843 Component: WebKit Impact: Visiting a malicious website may lead to address bar spoofing Description: An inconsistent user interface issue was addressed with improved state management.

CVE-2023-42952 [MEDIUM] CVE-2023-42952: iOS 17.1 and iPadOS 17.1 Apple Security Update: About the security content of iOS 17.1 and iPadOS 17.1 Product: iOS 17.1 and iPadOS Version: 17.1 CVE: CVE-2023-42952 Component: Automation Impact: An app with root privileges may be able to access private information Description: The issue was addressed with improved checks.

CVE-2023-42951 [MEDIUM] CVE-2023-42951: iOS 17.1 and iPadOS 17.1 Apple Security Update: About the security content of iOS 17.1 and iPadOS 17.1 Product: iOS 17.1 and iPadOS Version: 17.1 CVE: CVE-2023-42951 Component: Safari Impact: A user may be unable to delete browsing history items Description: The issue was addressed with improved handling of caches.

CVE-2023-42855 [MEDIUM] CVE-2023-42855: iOS 17.1 and iPadOS 17.1 Apple Security Update: About the security content of iOS 17.1 and iPadOS 17.1 Product: iOS 17.1 and iPadOS Version: 17.1 CVE: CVE-2023-42855 Component: Setup Assistant Impact: An attacker with physical access may be able to silently persist an Apple ID on an erased device Description: This issue was addressed with improved state management.

CVE-2023-42857 [LOW] CVE-2023-42857: iOS 17.1 and iPadOS 17.1 Apple Security Update: About the security content of iOS 17.1 and iPadOS 17.1 Product: iOS 17.1 and iPadOS Version: 17.1 CVE: CVE-2023-42857 Component: Contacts Impact: An app may be able to access sensitive user data Description: A privacy issue was addressed with improved private data redaction for log entries.

CVE-2023-42939 [LOW] CVE-2023-42939: iOS 17.1 and iPadOS 17.1 Apple Security Update: About the security content of iOS 17.1 and iPadOS 17.1 Product: iOS 17.1 and iPadOS Version: 17.1 CVE: CVE-2023-42939 Component: WebKit Impact: A user's private browsing activity may be unexpectedly saved in the App Privacy Report Description: A logic issue was addressed with improved checks.