CVSS: 7.8EPSS: 0%CPEs: 8EXPL: 0CVE-2023-38599 – webkitgtk: track sensitive user information
https://notcve.org/view.php?id=CVE-2023-38599
28 Jul 2023 — A logic issue was addressed with improved state management. This issue is fixed in Safari 16.6, watchOS 9.6, iOS 15.7.8 and iPadOS 15.7.8, tvOS 16.6, iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. A website may be able to track sensitive user information. A flaw was found in WebKitGTK, which exists due to a logic issue in WebKit related to a user's privacy. A remote attacker may be able to track sensitive user information. • http://www.openwall.com/lists/oss-security/2023/08/02/1 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 10.0EPSS: 0%CPEs: 8EXPL: 0CVE-2023-36495
https://notcve.org/view.php?id=CVE-2023-36495
28 Jul 2023 — An integer overflow was addressed with improved input validation. This issue is fixed in watchOS 9.6, macOS Monterey 12.6.8, iOS 15.7.8 and iPadOS 15.7.8, tvOS 16.6, iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. An app may be able to execute arbitrary code with kernel privileges. • https://support.apple.com/en-us/HT213841 • CWE-190: Integer Overflow or Wraparound •
CVSS: 6.4EPSS: 0%CPEs: 8EXPL: 0CVE-2023-32445
https://notcve.org/view.php?id=CVE-2023-32445
28 Jul 2023 — This issue was addressed with improved checks. This issue is fixed in Safari 16.6, watchOS 9.6, iOS 15.7.8 and iPadOS 15.7.8, tvOS 16.6, iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. Processing a document may lead to a cross site scripting attack. • https://support.apple.com/en-us/HT213841 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 10.0EPSS: 1%CPEs: 9EXPL: 0CVE-2023-38590
https://notcve.org/view.php?id=CVE-2023-38590
28 Jul 2023 — A buffer overflow issue was addressed with improved memory handling. This issue is fixed in watchOS 9.6, macOS Big Sur 11.7.9, iOS 15.7.8 and iPadOS 15.7.8, macOS Monterey 12.6.8, tvOS 16.6, iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. A remote user may be able to cause unexpected system termination or corrupt kernel memory. • https://support.apple.com/en-us/HT213841 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVSS: 10.0EPSS: 0%CPEs: 8EXPL: 0CVE-2023-34425
https://notcve.org/view.php?id=CVE-2023-34425
28 Jul 2023 — The issue was addressed with improved memory handling. This issue is fixed in watchOS 9.6, macOS Monterey 12.6.8, iOS 15.7.8 and iPadOS 15.7.8, macOS Big Sur 11.7.9, iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. An app may be able to execute arbitrary code with kernel privileges. • https://support.apple.com/en-us/HT213841 •
CVSS: 7.8EPSS: 0%CPEs: 7EXPL: 0CVE-2023-38603
https://notcve.org/view.php?id=CVE-2023-38603
27 Jul 2023 — The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. A remote user may be able to cause a denial-of-service. • https://support.apple.com/en-us/HT213841 •
CVSS: 10.0EPSS: 0%CPEs: 5EXPL: 0CVE-2023-32393 – webkitgtk: arbitrary code execution
https://notcve.org/view.php?id=CVE-2023-32393
27 Jul 2023 — The issue was addressed with improved memory handling. This issue is fixed in watchOS 9.3, tvOS 16.3, macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3. Processing web content may lead to arbitrary code execution. A flaw was found in WebKitGTK. This issue occurs when processing malicious web content, which may lead to arbitrary code execution. • https://security.gentoo.org/glsa/202401-04 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.8EPSS: 0%CPEs: 9EXPL: 0CVE-2023-38565
https://notcve.org/view.php?id=CVE-2023-38565
26 Jul 2023 — A path handling issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.6.8, iOS 16.6 and iPadOS 16.6, macOS Big Sur 11.7.9, macOS Ventura 13.5, watchOS 9.6. An app may be able to gain root privileges. • https://support.apple.com/en-us/HT213841 •
CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 0CVE-2023-38580
https://notcve.org/view.php?id=CVE-2023-38580
26 Jul 2023 — The issue was addressed with improved memory handling. This issue is fixed in iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5, watchOS 9.6. An app may be able to execute arbitrary code with kernel privileges. • https://support.apple.com/en-us/HT213841 •
CVSS: 5.5EPSS: 0%CPEs: 9EXPL: 0CVE-2023-38593
https://notcve.org/view.php?id=CVE-2023-38593
26 Jul 2023 — A logic issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.6.8, iOS 16.6 and iPadOS 16.6, macOS Big Sur 11.7.9, macOS Ventura 13.5, watchOS 9.6. An app may be able to cause a denial-of-service. • https://support.apple.com/en-us/HT213841 •