deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-25515
Published: 2023-06-23
Description: 


NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where unexpected untrusted data is parsed, which may lead to code execution, denial of service, escalation of privileges, data tampering, or information disclosure.

 


CVSS Score: 7.8 (HIGH)
CWE: CWE-822
References: https://https://nvidia.custhelp.com/app/answers/detail/a_id/5468; https://https://nvidia.custhelp.com/app/answers/detail/a_id/5468
CVE: CVE-2023-25518
Published: 2023-06-23
Description: 
NVIDIA Jetson contains a vulnerability in CBoot, where the PCIe controller is initialized without IOMMU, which may allow an attacker with physical access to the target device to read and write to arbitrary memory. A successful exploit of this vulnerability may lead to code execution, denial of service, information disclosure, and loss of integrity. 


CVSS Score: 7.1 (HIGH)
CWE: CWE-923
References: https://https://nvidia.custhelp.com/app/answers/detail/a_id/5466; https://https://nvidia.custhelp.com/app/answers/detail/a_id/5466
CVE: CVE-2023-25520
Published: 2023-06-23
Description: 
NVIDIA Jetson Linux Driver Package contains a vulnerability in nvbootctrl, where a privileged local attacker can configure invalid settings, resulting in denial of service.


CVSS Score: 4.4 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5466; https://nvidia.custhelp.com/app/answers/detail/a_id/5466
CVE: CVE-2023-27930
Published: 2023-06-23
Description: A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvOS 16.5, macOS Ventura 13.4. An app may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-843
References: https://support.apple.com/en-us/HT213757; https://support.apple.com/en-us/HT213758; https://support.apple.com/en-us/HT213761
CVE: CVE-2023-27940
Published: 2023-06-23
Description: The issue was addressed with additional permissions checks. This issue is fixed in iOS 15.7.6 and iPadOS 15.7.6, macOS Monterey 12.6.6, macOS Ventura 13.4. A sandboxed app may be able to observe system-wide network connections.
CVSS Score: 6.3 (MEDIUM)
References: https://support.apple.com/en-us/HT213758; https://support.apple.com/en-us/HT213759; https://support.apple.com/en-us/HT213765
CVE: CVE-2023-27964
Published: 2023-06-23
Description: An authentication issue was addressed with improved state management. This issue is fixed in AirPods Firmware Update 5E133. When your headphones are seeking a connection request to one of your previously paired devices, an attacker in Bluetooth range might be able to spoof the intended source device and gain access to your headphones.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-290
References: https://support.apple.com/en-us/HT213752; https://support.apple.com/en-us/HT213752
CVE: CVE-2023-28191
Published: 2023-06-23
Description: This issue was addressed with improved redaction of sensitive information. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. An app may be able to bypass Privacy preferences.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-346
References: https://support.apple.com/en-us/HT213757; https://support.apple.com/en-us/HT213758; https://support.apple.com/en-us/HT213759
CVE: CVE-2023-28202
Published: 2023-06-23
Description: This issue was addressed with improved state management. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvOS 16.5, macOS Ventura 13.4. An app firewall setting may not take effect after exiting the Settings app.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-640
References: https://support.apple.com/en-us/HT213757; https://support.apple.com/en-us/HT213758; https://support.apple.com/en-us/HT213761
CVE: CVE-2023-28204
Published: 2023-06-23
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, Safari 16.5, iOS 16.5 and iPadOS 16.5. Processing web content may disclose sensitive information. Apple is aware of a report that this issue may have been actively exploited.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://security.gentoo.org/glsa/202401-04; https://support.apple.com/en-us/HT213757; https://support.apple.com/en-us/HT213758
CVE: CVE-2023-32351
Published: 2023-06-23
Description: A logic issue was addressed with improved checks. This issue is fixed in iTunes 12.12.9 for Windows. An app may be able to gain elevated privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://support.apple.com/en-us/HT213763; https://support.apple.com/en-us/HT213763
CVE: CVE-2023-32352
Published: 2023-06-23
Description: A logic issue was addressed with improved checks. This issue is fixed in watchOS 9.5, macOS Ventura 13.4, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. An app may bypass Gatekeeper checks.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-639
References: https://support.apple.com/en-us/HT213757; https://support.apple.com/en-us/HT213758; https://support.apple.com/en-us/HT213759
CVE: CVE-2023-32353
Published: 2023-06-23
Description: A logic issue was addressed with improved checks. This issue is fixed in iTunes 12.12.9 for Windows. An app may be able to elevate privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-863
References: https://support.apple.com/en-us/HT213763; https://support.apple.com/en-us/HT213763
CVE: CVE-2023-32354
Published: 2023-06-23
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, iOS 16.5 and iPadOS 16.5. An app may be able to disclose kernel memory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://support.apple.com/en-us/HT213757; https://support.apple.com/en-us/HT213761; https://support.apple.com/en-us/HT213764
CVE: CVE-2023-32355
Published: 2023-06-23
Description: A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. An app may be able to modify protected parts of the file system.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-281
References: https://support.apple.com/en-us/HT213758; https://support.apple.com/en-us/HT213759; https://support.apple.com/en-us/HT213760
CVE: CVE-2023-32357
Published: 2023-06-23
Description: An authorization issue was addressed with improved state management. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. An app may be able to retain access to system configuration files even after its permission is revoked.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://support.apple.com/en-us/HT213757; https://support.apple.com/en-us/HT213758; https://support.apple.com/en-us/HT213759
CVE: CVE-2023-32360
Published: 2023-06-23
Description: An authentication issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. An unauthenticated user may be able to access recently printed documents.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://lists.debian.org/debian-lts-announce/2023/09/msg00041.html; https://support.apple.com/en-us/HT213758; https://support.apple.com/en-us/HT213759
CVE: CVE-2023-32363
Published: 2023-06-23
Description: A permissions issue was addressed by removing vulnerable code and adding additional checks. This issue is fixed in macOS Ventura 13.4. An app may be able to bypass Privacy preferences.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://support.apple.com/en-us/HT213758; https://support.apple.com/en-us/HT213758
CVE: CVE-2023-32365
Published: 2023-06-23
Description: The issue was addressed with improved checks. This issue is fixed in iOS 15.7.6 and iPadOS 15.7.6, iOS 16.5 and iPadOS 16.5. Shake-to-undo may allow a deleted photo to be re-surfaced without authentication.
CVSS Score: 2.4 (LOW)
References: https://support.apple.com/en-us/HT213757; https://support.apple.com/en-us/HT213765; https://support.apple.com/en-us/HT213757
CVE: CVE-2023-32367
Published: 2023-06-23
Description: This issue was addressed with improved entitlements. This issue is fixed in iOS 16.5 and iPadOS 16.5, macOS Ventura 13.4. An app may be able to access user-sensitive data.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT213757; https://support.apple.com/en-us/HT213758; https://support.apple.com/en-us/HT213757
CVE: CVE-2023-32368
Published: 2023-06-23
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. Processing a 3D model may result in disclosure of process memory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://support.apple.com/en-us/HT213757; https://support.apple.com/en-us/HT213758; https://support.apple.com/en-us/HT213759
CVE: CVE-2023-32369
Published: 2023-06-23
Description: A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. An app may be able to modify protected parts of the file system.
CVSS Score: 6.0 (MEDIUM)
References: https://support.apple.com/en-us/HT213758; https://support.apple.com/en-us/HT213759; https://support.apple.com/en-us/HT213760
CVE: CVE-2023-32371
Published: 2023-06-23
Description: The issue was addressed with improved checks. This issue is fixed in iOS 16.5 and iPadOS 16.5, macOS Ventura 13.4. An app may be able to break out of its sandbox.
CVSS Score: 6.3 (MEDIUM)
References: https://support.apple.com/en-us/HT213757; https://support.apple.com/en-us/HT213758; https://support.apple.com/en-us/HT213757
CVE: CVE-2023-32372
Published: 2023-06-23
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvOS 16.5, macOS Ventura 13.4. Processing an image may result in disclosure of process memory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://support.apple.com/en-us/HT213757; https://support.apple.com/en-us/HT213758; https://support.apple.com/en-us/HT213761
CVE: CVE-2023-32373
Published: 2023-06-23
Description: A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, Safari 16.5, iOS 16.5 and iPadOS 16.5. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://security.gentoo.org/glsa/202401-04; https://support.apple.com/en-us/HT213757; https://support.apple.com/en-us/HT213758
CVE: CVE-2023-32375
Published: 2023-06-23
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Monterey 12.6.6, macOS Ventura 13.4. Processing a 3D model may result in disclosure of process memory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://support.apple.com/en-us/HT213758; https://support.apple.com/en-us/HT213759; https://support.apple.com/en-us/HT213758
CVE: CVE-2023-32376
Published: 2023-06-23
Description: This issue was addressed with improved entitlements. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvOS 16.5, macOS Ventura 13.4. An app may be able to modify protected parts of the file system.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT213757; https://support.apple.com/en-us/HT213758; https://support.apple.com/en-us/HT213761
CVE: CVE-2023-32380
Published: 2023-06-23
Description: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. Processing a 3D model may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT213758; https://support.apple.com/en-us/HT213759; https://support.apple.com/en-us/HT213760
CVE: CVE-2023-32382
Published: 2023-06-23
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. Processing a 3D model may result in disclosure of process memory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://support.apple.com/en-us/HT213758; https://support.apple.com/en-us/HT213759; https://support.apple.com/en-us/HT213760
CVE: CVE-2023-32384
Published: 2023-06-23
Description: A buffer overflow was addressed with improved bounds checking. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. Processing an image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://support.apple.com/en-us/HT213757; https://support.apple.com/en-us/HT213758; https://support.apple.com/en-us/HT213759
CVE: CVE-2023-32385
Published: 2023-06-23
Description: A denial-of-service issue was addressed with improved memory handling. This issue is fixed in iOS 16.5 and iPadOS 16.5, macOS Ventura 13.4. Opening a PDF file may lead to unexpected app termination.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-770
References: https://support.apple.com/en-us/HT213757; https://support.apple.com/en-us/HT213758; https://support.apple.com/en-us/HT213757
CVE: CVE-2023-32386
Published: 2023-06-23
Description: A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. An app may be able to observe unprotected user data.
CVSS Score: 3.3 (LOW)
CWE: CWE-125
References: https://support.apple.com/en-us/HT213758; https://support.apple.com/en-us/HT213759; https://support.apple.com/en-us/HT213760
CVE: CVE-2023-32387
Published: 2023-06-23
Description: A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. A remote attacker may be able to cause unexpected app termination or arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://support.apple.com/en-us/HT213758; https://support.apple.com/en-us/HT213759; https://support.apple.com/en-us/HT213760
CVE: CVE-2023-32388
Published: 2023-06-23
Description: A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in watchOS 9.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. An app may be able to bypass Privacy preferences.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-281
References: https://support.apple.com/en-us/HT213757; https://support.apple.com/en-us/HT213758; https://support.apple.com/en-us/HT213759
CVE: CVE-2023-32389
Published: 2023-06-23
Description: This  issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvOS 16.5, macOS Ventura 13.4. An app may be able to disclose kernel memory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://support.apple.com/en-us/HT213757; https://support.apple.com/en-us/HT213758; https://support.apple.com/en-us/HT213761
CVE: CVE-2023-32390
Published: 2023-06-23
Description: The issue was addressed with improved checks. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, macOS Ventura 13.4. Photos belonging to the Hidden Photos Album could be viewed without authentication through Visual Lookup.
CVSS Score: 2.4 (LOW)
CWE: CWE-125
References: https://support.apple.com/en-us/HT213757; https://support.apple.com/en-us/HT213758; https://support.apple.com/en-us/HT213764
CVE: CVE-2023-32391
Published: 2023-06-23
Description: The issue was addressed with improved checks. This issue is fixed in iOS 15.7.6 and iPadOS 15.7.6, watchOS 9.5, iOS 16.5 and iPadOS 16.5, macOS Ventura 13.4. A shortcut may be able to use sensitive data with certain actions without prompting the user.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-125
References: https://support.apple.com/en-us/HT213757; https://support.apple.com/en-us/HT213758; https://support.apple.com/en-us/HT213764
CVE: CVE-2023-32392
Published: 2023-06-23
Description: A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. An app may be able to read sensitive location information.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-532
References: https://support.apple.com/en-us/HT213757; https://support.apple.com/en-us/HT213758; https://support.apple.com/en-us/HT213759
CVE: CVE-2023-32394
Published: 2023-06-23
Description: The issue was addressed with improved checks. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvOS 16.5, macOS Ventura 13.4. A person with physical access to a device may be able to view contact information from the lock screen.
CVSS Score: 2.4 (LOW)
CWE: CWE-668
References: https://support.apple.com/en-us/HT213757; https://support.apple.com/en-us/HT213758; https://support.apple.com/en-us/HT213761
CVE: CVE-2023-32395
Published: 2023-06-23
Description: A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. An app may be able to modify protected parts of the file system.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://support.apple.com/en-us/HT213758; https://support.apple.com/en-us/HT213759; https://support.apple.com/en-us/HT213760
CVE: CVE-2023-32397
Published: 2023-06-23
Description: A logic issue was addressed with improved state management. This issue is fixed in iOS 15.7.6 and iPadOS 15.7.6, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. An app may be able to modify protected parts of the file system.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT213758; https://support.apple.com/en-us/HT213759; https://support.apple.com/en-us/HT213760
CVE: CVE-2023-32398
Published: 2023-06-23
Description: A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. An app may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://support.apple.com/en-us/HT213757; https://support.apple.com/en-us/HT213758; https://support.apple.com/en-us/HT213759
CVE: CVE-2023-32399
Published: 2023-06-23
Description: The issue was addressed with improved handling of caches. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvOS 16.5, macOS Ventura 13.4. An app may be able to read sensitive location information.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-276
References: https://support.apple.com/en-us/HT213757; https://support.apple.com/en-us/HT213758; https://support.apple.com/en-us/HT213761
CVE: CVE-2023-32400
Published: 2023-06-23
Description: This issue was addressed with improved checks. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, macOS Ventura 13.4. Entitlements and privacy permissions granted to this app may be used by a malicious app.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-281
References: https://support.apple.com/en-us/HT213757; https://support.apple.com/en-us/HT213758; https://support.apple.com/en-us/HT213764
CVE: CVE-2023-32402
Published: 2023-06-23
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, Safari 16.5, iOS 16.5 and iPadOS 16.5. Processing web content may disclose sensitive information.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://support.apple.com/en-us/HT213757; https://support.apple.com/en-us/HT213758; https://support.apple.com/en-us/HT213761
CVE: CVE-2023-32403
Published: 2023-06-23
Description: This  issue was addressed with improved redaction of sensitive information. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. An app may be able to read sensitive location information.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://support.apple.com/en-us/HT213757; https://support.apple.com/en-us/HT213758; https://support.apple.com/en-us/HT213759
CVE: CVE-2023-32404
Published: 2023-06-23
Description: This issue was addressed with improved entitlements. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, macOS Ventura 13.4. An app may be able to bypass Privacy preferences.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-276
References: https://support.apple.com/en-us/HT213757; https://support.apple.com/en-us/HT213758; https://support.apple.com/en-us/HT213764
CVE: CVE-2023-32405
Published: 2023-06-23
Description: A logic issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. An app may be able to gain root privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://support.apple.com/en-us/HT213758; https://support.apple.com/en-us/HT213759; https://support.apple.com/en-us/HT213760
CVE: CVE-2023-32407
Published: 2023-06-23
Description: A logic issue was addressed with improved state management. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. An app may be able to bypass Privacy preferences.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-276
References: https://support.apple.com/en-us/HT213757; https://support.apple.com/en-us/HT213758; https://support.apple.com/en-us/HT213759
CVE: CVE-2023-32408
Published: 2023-06-23
Description: The issue was addressed with improved handling of caches. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. An app may be able to read sensitive location information.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT213757; https://support.apple.com/en-us/HT213758; https://support.apple.com/en-us/HT213759
CVE: CVE-2023-32409
Published: 2023-06-23
Description: The issue was addressed with improved bounds checks. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.8 and iPadOS 15.7.8, Safari 16.5, iOS 16.5 and iPadOS 16.5. A remote attacker may be able to break out of Web Content sandbox. Apple is aware of a report that this issue may have been actively exploited.
CVSS Score: 8.6 (HIGH)
References: https://support.apple.com/en-us/HT213757; https://support.apple.com/en-us/HT213758; https://support.apple.com/en-us/HT213761
CVE: CVE-2023-32410
Published: 2023-06-23
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 15.7.6 and iPadOS 15.7.6, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. An app may be able to leak sensitive kernel state.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://support.apple.com/en-us/HT213758; https://support.apple.com/en-us/HT213759; https://support.apple.com/en-us/HT213760
CVE: CVE-2023-32411
Published: 2023-06-23
Description: This issue was addressed with improved entitlements. This issue is fixed in tvOS 16.5, macOS Ventura 13.4, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. An app may be able to bypass Privacy preferences.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT213757; https://support.apple.com/en-us/HT213758; https://support.apple.com/en-us/HT213759