Apple Ios And Ipados vulnerabilities

1,463 known vulnerabilities affecting apple/ios_and_ipados.

Total CVEs
1,463
CISA KEV
57
actively exploited
Public exploits
1
Exploited in wild
44
Severity breakdown
CRITICAL73HIGH563MEDIUM708LOW119

Vulnerabilities

Page 40 of 74
CVE-2023-40423HIGHCVSS 7.8≥ unspecified, < 16.7≥ unspecified, < 17.12023-10-25
CVE-2023-40423 [HIGH] CWE-119 CVE-2023-40423: The issue was addressed with improved memory handling. This issue is fixed in iOS 17.1 and iPadOS 17 The issue was addressed with improved memory handling. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS Monterey 12.7.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Ventura 13.6.1, macOS Sonoma 14.1. An app may be able to execute arbitrary code with kernel privileges.
nvd
CVE-2023-42841HIGHCVSS 7.8≥ unspecified, < 16.7≥ unspecified, < 17.12023-10-25
CVE-2023-42841 [HIGH] CWE-119 CVE-2023-42841: The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.1, iOS The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Ventura 13.6.1. An app may be able to execute arbitrary code with kernel privileges.
nvd
CVE-2023-40447HIGHCVSS 8.8≥ unspecified, < 16.7≥ unspecified, < 17.12023-10-25
CVE-2023-40447 [HIGH] CWE-119 CVE-2023-40447: The issue was addressed with improved memory handling. This issue is fixed in iOS 17.1 and iPadOS 17 The issue was addressed with improved memory handling. This issue is fixed in iOS 17.1 and iPadOS 17.1, watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Sonoma 14.1, Safari 17.1, tvOS 17.1. Processing web content may lead to arbitrary code execution.
nvd
CVE-2023-42852HIGHCVSS 8.8≥ unspecified, < 16.7≥ unspecified, < 17.12023-10-25
CVE-2023-42852 [HIGH] CVE-2023-42852: A logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1, w A logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1, watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Sonoma 14.1, Safari 17.1, tvOS 17.1. Processing web content may lead to arbitrary code execution.
nvd
CVE-2023-40445HIGHCVSS 7.5≥ unspecified, < 17.12023-10-25
CVE-2023-40445 [HIGH] CWE-358 CVE-2023-40445: The issue was addressed with improved UI handling. This issue is fixed in iOS 17.1 and iPadOS 17.1. The issue was addressed with improved UI handling. This issue is fixed in iOS 17.1 and iPadOS 17.1. A device may persistently fail to lock.
nvd
CVE-2023-42847HIGHCVSS 7.5≥ unspecified, < 17.12023-10-25
CVE-2023-42847 [HIGH] CVE-2023-42847: A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1, iOS 17.1 A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1. An attacker may be able to access passkeys without authentication.
nvd
CVE-2023-41997MEDIUMCVSS 4.6≥ unspecified, < 16.7≥ unspecified, < 17.12023-10-25
CVE-2023-41997 [MEDIUM] CVE-2023-41997: This issue was addressed by restricting options offered on a locked device. This issue is fixed in m This issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sonoma 14.1, watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1. An attacker with physical access may be able to use Siri to access sensitive user data.
nvd
CVE-2023-41977MEDIUMCVSS 4.3≥ unspecified, < 16.72023-10-25
CVE-2023-41977 [MEDIUM] CVE-2023-41977: The issue was addressed with improved handling of caches. This issue is fixed in macOS Sonoma 14.1, The issue was addressed with improved handling of caches. This issue is fixed in macOS Sonoma 14.1, iOS 16.7.2 and iPadOS 16.7.2. Visiting a malicious website may reveal browsing history.
nvd
CVE-2023-40413MEDIUMCVSS 5.5≥ unspecified, < 16.7≥ unspecified, < 17.12023-10-25
CVE-2023-40413 [MEDIUM] CVE-2023-40413: The issue was addressed with improved handling of caches. This issue is fixed in iOS 17.1 and iPadOS The issue was addressed with improved handling of caches. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS Monterey 12.7.1, watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Ventura 13.6.1, macOS Sonoma 14.1. An app may be able to read sensitive location information.
nvd
CVE-2023-41983MEDIUMCVSS 6.5≥ unspecified, < 16.7≥ unspecified, < 17.12023-10-25
CVE-2023-41983 [MEDIUM] CWE-119 CVE-2023-41983: The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.1, Saf The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.1, Safari 17.1, iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1. Processing web content may lead to a denial-of-service.
nvd
CVE-2023-42846MEDIUMCVSS 5.3≥ unspecified, < 16.7≥ unspecified, < 17.12023-10-25
CVE-2023-42846 [MEDIUM] CWE-200 CVE-2023-42846: This issue was addressed by removing the vulnerable code. This issue is fixed in watchOS 10.1, iOS 1 This issue was addressed by removing the vulnerable code. This issue is fixed in watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, tvOS 17.1, iOS 17.1 and iPadOS 17.1. A device may be passively tracked by its Wi-Fi MAC address.
nvd
CVE-2023-40408MEDIUMCVSS 5.3≥ unspecified, < 16.7≥ unspecified, < 17.12023-10-25
CVE-2023-40408 [MEDIUM] CWE-400 CVE-2023-40408: An inconsistent user interface issue was addressed with improved state management. This issue is fix An inconsistent user interface issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14.1, watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1. Hide My Email may be deactivated unexpectedly.
nvd
CVE-2023-40416MEDIUMCVSS 6.5≥ unspecified, < 16.7≥ unspecified, < 17.12023-10-25
CVE-2023-40416 [MEDIUM] CWE-119 CVE-2023-40416: The issue was addressed with improved memory handling. This issue is fixed in iOS 17.1 and iPadOS 17 The issue was addressed with improved memory handling. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS Monterey 12.7.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Ventura 13.6.1, macOS Sonoma 14.1. Processing an image may result in disclosure of process memory.
nvd
CVE-2023-41254MEDIUMCVSS 5.5≥ unspecified, < 16.7≥ unspecified, < 17.12023-10-25
CVE-2023-41254 [MEDIUM] CWE-532 CVE-2023-41254: A privacy issue was addressed with improved private data redaction for log entries. This issue is fi A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 17.1 and iPadOS 17.1, watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Ventura 13.6.1, macOS Sonoma 14.1. An app may be able to access sensitive user data.
nvd
CVE-2023-41982MEDIUMCVSS 4.6≥ unspecified, < 16.7≥ unspecified, < 17.12023-10-25
CVE-2023-41982 [MEDIUM] CVE-2023-41982: This issue was addressed by restricting options offered on a locked device. This issue is fixed in m This issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sonoma 14.1, watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1. An attacker with physical access may be able to use Siri to access sensitive user data.
nvd
CVE-2023-42845MEDIUMCVSS 5.3≥ unspecified, < 17.12023-10-25
CVE-2023-42845 [MEDIUM] CWE-306 CVE-2023-42845: An authentication issue was addressed with improved state management. This issue is fixed in macOS S An authentication issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1. Photos in the Hidden Photos Album may be viewed without authentication.
nvd
CVE-2023-41072MEDIUMCVSS 5.5≥ unspecified, < 17.12023-10-25
CVE-2023-41072 [MEDIUM] CVE-2023-41072: A privacy issue was addressed with improved private data redaction for log entries. This issue is fi A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1. An app may be able to access sensitive user data.
nvd
CVE-2023-40449MEDIUMCVSS 5.5≥ unspecified, < 16.7≥ unspecified, < 17.12023-10-25
CVE-2023-40449 [MEDIUM] CWE-119 CVE-2023-40449: The issue was addressed with improved memory handling. This issue is fixed in iOS 17.1 and iPadOS 17 The issue was addressed with improved memory handling. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS Monterey 12.7.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Ventura 13.6.1, macOS Sonoma 14.1. An app may be able to cause a denial-of-service.
nvd
CVE-2023-41988MEDIUMCVSS 6.8≥ unspecified, < 17.12023-10-25
CVE-2023-41988 [MEDIUM] CWE-200 CVE-2023-41988: This issue was addressed by restricting options offered on a locked device. This issue is fixed in m This issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sonoma 14.1, watchOS 10.1, iOS 17.1 and iPadOS 17.1. An attacker with physical access may be able to use Siri to access sensitive user data.
nvd
CVE-2023-42849MEDIUMCVSS 6.5≥ unspecified, < 16.7≥ unspecified, < 17.12023-10-25
CVE-2023-42849 [MEDIUM] CWE-119 CVE-2023-42849: The issue was addressed with improved memory handling. This issue is fixed in iOS 17.1 and iPadOS 17 The issue was addressed with improved memory handling. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS Monterey 12.7.1, watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Ventura 13.6.1, macOS Sonoma 14.1. An attacker that has already achieved kernel code execution may be able to bypass kernel memory mitigations.
nvd
← Previous40 / 74Next →