Apple Ios And Ipados vulnerabilities
1,463 known vulnerabilities affecting apple/ios_and_ipados.
Total CVEs
1,463
CISA KEV
57
actively exploited
Public exploits
1
Exploited in wild
44
Severity breakdown
CRITICAL73HIGH563MEDIUM708LOW119
Vulnerabilities
Page 51 of 74
CVE-2023-23496HIGHCVSS 8.8≥ unspecified, < 16.3≥ unspecified, < 15.72023-02-27
CVE-2023-23496 [HIGH] CWE-94 CVE-2023-23496: The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.2, watchOS 9.3
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.2, watchOS 9.3, iOS 15.7.2 and iPadOS 15.7.2, Safari 16.3, tvOS 16.3, iOS 16.3 and iPadOS 16.3. Processing maliciously crafted web content may lead to arbitrary code execution.
nvd
CVE-2023-23504HIGHCVSS 7.8≥ unspecified, < 16.3≥ unspecified, < 15.72023-02-27
CVE-2023-23504 [HIGH] CWE-787 CVE-2023-23504: The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3,
The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, watchOS 9.3, iOS 15.7.3 and iPadOS 15.7.3, tvOS 16.3, iOS 16.3 and iPadOS 16.3. An app may be able to execute arbitrary code with kernel privileges.
nvd
CVE-2023-23529HIGHCVSS 8.8KEV≥ unspecified, < 16.3≥ unspecified, < 15.72023-02-27
CVE-2023-23529 [HIGH] CWE-843 CVE-2023-23529: A type confusion issue was addressed with improved checks. This issue is fixed in iOS 15.7.4 and iPa
A type confusion issue was addressed with improved checks. This issue is fixed in iOS 15.7.4 and iPadOS 15.7.4, iOS 16.3.1 and iPadOS 16.3.1, macOS Ventura 13.2.1, Safari 16.3. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.
nvd
CVE-2023-23512MEDIUMCVSS 6.5≥ unspecified, < 16.32023-02-27
CVE-2023-23512 [MEDIUM] CVE-2023-23512: The issue was addressed with improved handling of caches. This issue is fixed in watchOS 9.3, tvOS 1
The issue was addressed with improved handling of caches. This issue is fixed in watchOS 9.3, tvOS 16.3, macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3. Visiting a website may lead to an app denial-of-service.
nvd
CVE-2023-23520MEDIUMCVSS 5.9≥ unspecified, < 16.32023-02-27
CVE-2023-23520 [MEDIUM] CWE-367 CVE-2023-23520: A race condition was addressed with additional validation. This issue is fixed in watchOS 9.3, tvOS
A race condition was addressed with additional validation. This issue is fixed in watchOS 9.3, tvOS 16.3, macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3. A user may be able to read arbitrary files as root.
nvd
CVE-2023-23511MEDIUMCVSS 5.5≥ unspecified, < 16.32023-02-27
CVE-2023-23511 [MEDIUM] CWE-200 CVE-2023-23511: The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3,
The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3, tvOS 16.3, watchOS 9.3. An app may be able to bypass Privacy preferences.
nvd
CVE-2023-23503MEDIUMCVSS 5.5≥ unspecified, < 16.3≥ unspecified, < 15.72023-02-27
CVE-2023-23503 [MEDIUM] CWE-288 CVE-2023-23503: A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.
A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3, iOS 15.7.3 and iPadOS 15.7.3, tvOS 16.3, watchOS 9.3. An app may be able to bypass Privacy preferences.
nvd
CVE-2022-32855MEDIUMCVSS 5.5≥ unspecified, < 15.62023-02-27
CVE-2022-32855 [MEDIUM] CWE-200 CVE-2022-32855: A logic issue was addressed with improved state management. This issue is fixed in iOS 15.6 and iPad
A logic issue was addressed with improved state management. This issue is fixed in iOS 15.6 and iPadOS 15.6. A user may be able to view restricted content from the lock screen.
nvd
CVE-2023-23500MEDIUMCVSS 5.5≥ unspecified, < 16.3≥ unspecified, < 15.72023-02-27
CVE-2023-23500 [MEDIUM] CWE-200 CVE-2023-23500: The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.2, iO
The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3, iOS 15.7.3 and iPadOS 15.7.3, tvOS 16.3, watchOS 9.3. An app may be able to leak sensitive kernel state.
nvd
CVE-2022-32784MEDIUMCVSS 6.5≥ unspecified, < 15.62023-02-27
CVE-2022-32784 [MEDIUM] CWE-200 CVE-2022-32784: The issue was addressed with improved UI handling. This issue is fixed in Safari 15.6, iOS 15.6 and
The issue was addressed with improved UI handling. This issue is fixed in Safari 15.6, iOS 15.6 and iPadOS 15.6. Visiting a maliciously crafted website may leak sensitive data.
nvd
CVE-2023-23502MEDIUMCVSS 5.5≥ unspecified, < 16.32023-02-27
CVE-2023-23502 [MEDIUM] CWE-125 CVE-2023-23502: An information disclosure issue was addressed by removing the vulnerable code. This issue is fixed i
An information disclosure issue was addressed by removing the vulnerable code. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3, tvOS 16.3, watchOS 9.3. An app may be able to determine kernel memory layout.
nvd
CVE-2023-23499MEDIUMCVSS 5.5≥ unspecified, < 16.32023-02-27
CVE-2023-23499 [MEDIUM] CWE-200 CVE-2023-23499: This issue was addressed by enabling hardened runtime. This issue is fixed in macOS Monterey 12.6.3,
This issue was addressed by enabling hardened runtime. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, watchOS 9.3, macOS Big Sur 11.7.3, tvOS 16.3, iOS 16.3 and iPadOS 16.3. An app may be able to access user-sensitive data.
nvd
CVE-2023-23498LOWCVSS 3.3≥ unspecified, < 16.3≥ unspecified, < 15.72023-02-27
CVE-2023-23498 [LOW] CVE-2023-23498: A logic issue was addressed with improved state management. This issue is fixed in iOS 15.7.3 and iP
A logic issue was addressed with improved state management. This issue is fixed in iOS 15.7.3 and iPadOS 15.7.3, macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3. The quoted original message may be selected from the wrong email when forwarding an email from an Exchange account.
nvd
CVE-2023-23505LOWCVSS 3.3≥ unspecified, < 16.3≥ unspecified, < 15.72023-02-27
CVE-2023-23505 [LOW] CWE-532 CVE-2023-23505: A privacy issue was addressed with improved private data redaction for log entries. This issue is fi
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, watchOS 9.3, macOS Big Sur 11.7.3, iOS 15.7.3 and iPadOS 15.7.3, iOS 16.3 and iPadOS 16.3. An app may be able to access information about a user’s contacts.
nvd
CVE-2022-42844HIGHCVSS 8.6≥ unspecified, < 16.22022-12-15
CVE-2022-42844 [HIGH] CWE-119 CVE-2022-42844: The issue was addressed with improved memory handling. This issue is fixed in iOS 16.2 and iPadOS 16
The issue was addressed with improved memory handling. This issue is fixed in iOS 16.2 and iPadOS 16.2. An app may be able to break out of its sandbox.
nvd
CVE-2022-42850HIGHCVSS 7.8≥ unspecified, < 16.22022-12-15
CVE-2022-42850 [HIGH] CWE-787 CVE-2022-42850: The issue was addressed with improved memory handling. This issue is fixed in iOS 16.2 and iPadOS 16
The issue was addressed with improved memory handling. This issue is fixed in iOS 16.2 and iPadOS 16.2. An app may be able to execute arbitrary code with kernel privileges.
nvd
CVE-2022-42846MEDIUMCVSS 5.5≥ unspecified, < 16.2≥ unspecified, < 15.72022-12-15
CVE-2022-42846 [MEDIUM] CWE-119 CVE-2022-42846: The issue was addressed with improved memory handling. This issue is fixed in iOS 16.2 and iPadOS 16
The issue was addressed with improved memory handling. This issue is fixed in iOS 16.2 and iPadOS 16.2, iOS 15.7.2 and iPadOS 15.7.2. Parsing a maliciously crafted video file may lead to unexpected system termination.
nvd
CVE-2022-46702MEDIUMCVSS 5.5≥ unspecified, < 16.22022-12-15
CVE-2022-46702 [MEDIUM] CWE-200 CVE-2022-46702: The issue was addressed with improved memory handling. This issue is fixed in iOS 16.2 and iPadOS 16
The issue was addressed with improved memory handling. This issue is fixed in iOS 16.2 and iPadOS 16.2. An app may be able to disclose kernel memory.
nvd
CVE-2022-32927HIGHCVSS 7.5≥ unspecified, < 16.1≥ unspecified, < 15.72022-11-01
CVE-2022-32927 [HIGH] CWE-400 CVE-2022-32927: The issue was addressed with improved memory handling. This issue is fixed in iOS 15.7.1 and iPadOS
The issue was addressed with improved memory handling. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iPadOS 16. Joining a malicious Wi-Fi network may result in a denial-of-service of the Settings app.
nvd
CVE-2022-42827HIGHCVSS 7.8KEV≥ unspecified, < 16.1≥ unspecified, < 15.72022-11-01
CVE-2022-42827 [HIGH] CWE-787 CVE-2022-42827: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iPadOS 16. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited..
nvd