CVSS: 3.3EPSS: 0%CPEs: 2EXPL: 0CVE-2023-40394
https://notcve.org/view.php?id=CVE-2023-40394
The issue was addressed with improved validation of environment variables. This issue is fixed in iOS 16.6 and iPadOS 16.6. An app may be able to access sensitive user data. El problema se abordó con una validación mejorada de las variables ambientales. Este problema se solucionó en iOS 16.6 y iPadOS 16.6. • https://support.apple.com/en-us/HT213841 •
CVSS: 5.5EPSS: 0%CPEs: 3EXPL: 0CVE-2023-42829
https://notcve.org/view.php?id=CVE-2023-42829
The issue was addressed with additional restrictions on the observability of app states. This issue is fixed in macOS Big Sur 11.7.9, macOS Monterey 12.6.8, macOS Ventura 13.5. An app may be able to access SSH passphrases. El problema se solucionó con restricciones adicionales sobre la observabilidad de los estados de las aplicaciones. Este problema se solucionó en macOS Big Sur 11.7.9, macOS Monterey 12.6.8, macOS Ventura 13.5. • https://support.apple.com/en-us/HT213843 https://support.apple.com/en-us/HT213844 https://support.apple.com/en-us/HT213845 •
CVSS: 5.5EPSS: 0%CPEs: 2EXPL: 0CVE-2023-41069
https://notcve.org/view.php?id=CVE-2023-41069
This issue was addressed by improving Face ID anti-spoofing models. This issue is fixed in iOS 17 and iPadOS 17. A 3D model constructed to look like the enrolled user may authenticate via Face ID. Este problema se solucionó mejorando los modelos anti-spoofing de Face ID. Este problema se solucionó en iOS 17 y iPadOS 17. • https://support.apple.com/en-us/HT213938 •
CVSS: 9.8EPSS: 0%CPEs: 6EXPL: 0CVE-2023-40414 – webkitgtk: Processing web content may lead to arbitrary code execution
https://notcve.org/view.php?id=CVE-2023-40414
A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 10, iOS 17 and iPadOS 17, tvOS 17, macOS Sonoma 14, Safari 17. Processing web content may lead to arbitrary code execution. Se solucionó un problema de use after free con una gestión de memoria mejorada. Este problema se solucionó en watchOS 10, iOS 17 y iPadOS 17, tvOS 17, macOS Sonoma 14, Safari 17. • http://www.openwall.com/lists/oss-security/2024/02/05/8 https://support.apple.com/en-us/HT213936 https://support.apple.com/en-us/HT213937 https://support.apple.com/en-us/HT213938 https://support.apple.com/en-us/HT213940 https://support.apple.com/en-us/HT213941 https://access.redhat.com/security/cve/CVE-2023-40414 https://bugzilla.redhat.com/show_bug.cgi?id=2270143 • CWE-416: Use After Free •
CVSS: 5.5EPSS: 0%CPEs: 3EXPL: 0CVE-2023-40438
https://notcve.org/view.php?id=CVE-2023-40438
An issue was addressed with improved handling of temporary files. This issue is fixed in macOS Sonoma 14, iOS 16.7 and iPadOS 16.7. An app may be able to access edited photos saved to a temporary directory. Se solucionó un problema con el manejo mejorado de archivos temporales. Este problema se solucionó en macOS Sonoma 14, iOS 16.7 y iPadOS 16.7. • https://support.apple.com/en-us/HT213927 https://support.apple.com/en-us/HT213940 •