CVSS: 5.5EPSS: 0%CPEs: 5EXPL: 0CVE-2023-28202
https://notcve.org/view.php?id=CVE-2023-28202
30 May 2023 — This issue was addressed with improved state management. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvOS 16.5, macOS Ventura 13.4. An app firewall setting may not take effect after exiting the Settings app. • https://support.apple.com/en-us/HT213757 • CWE-640: Weak Password Recovery Mechanism for Forgotten Password •
CVSS: 7.8EPSS: 0%CPEs: 9EXPL: 0CVE-2023-28204 – Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability
https://notcve.org/view.php?id=CVE-2023-28204
30 May 2023 — An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, Safari 16.5, iOS 16.5 and iPadOS 16.5. Processing web content may disclose sensitive information. Apple is aware of a report that this issue may have been actively exploited. A flaw was found in the webkitgtk package. • https://security.gentoo.org/glsa/202401-04 • CWE-20: Improper Input Validation CWE-125: Out-of-bounds Read •
CVSS: 7.8EPSS: 0%CPEs: 5EXPL: 0CVE-2023-27930
https://notcve.org/view.php?id=CVE-2023-27930
30 May 2023 — A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvOS 16.5, macOS Ventura 13.4. An app may be able to execute arbitrary code with kernel privileges. • https://support.apple.com/en-us/HT213757 • CWE-843: Access of Resource Using Incompatible Type ('Type Confusion') •
CVSS: 8.6EPSS: 0%CPEs: 3EXPL: 0CVE-2022-46720
https://notcve.org/view.php?id=CVE-2022-46720
08 May 2023 — An integer overflow was addressed with improved input validation. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1. An app may be able to break out of its sandbox • https://support.apple.com/en-us/HT213530 • CWE-190: Integer Overflow or Wraparound •
CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 0CVE-2023-23536
https://notcve.org/view.php?id=CVE-2023-23536
08 May 2023 — The issue was addressed with improved bounds checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Big Sur 11.7.5, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. An app may be able to execute arbitrary code with kernel privileges. • https://support.apple.com/en-us/HT213670 •
CVSS: 5.5EPSS: 0%CPEs: 4EXPL: 0CVE-2023-28178
https://notcve.org/view.php?id=CVE-2023-28178
08 May 2023 — A logic issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. An app may be able to bypass Privacy preferences. • https://support.apple.com/en-us/HT213670 •
CVSS: 6.8EPSS: 0%CPEs: 7EXPL: 0CVE-2023-28182
https://notcve.org/view.php?id=CVE-2023-28182
08 May 2023 — The issue was addressed with improved authentication. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. A user in a privileged network position may be able to spoof a VPN server that is configured with EAP-only authentication on a device. • https://support.apple.com/en-us/HT213670 • CWE-287: Improper Authentication •
CVSS: 3.3EPSS: 0%CPEs: 2EXPL: 0CVE-2023-28194
https://notcve.org/view.php?id=CVE-2023-28194
08 May 2023 — The issue was addressed with improved checks. This issue is fixed in iOS 16.4 and iPadOS 16.4. An app may be able to unexpectedly create a bookmark on the Home Screen. • https://support.apple.com/en-us/HT213676 •
CVSS: 5.5EPSS: 0%CPEs: 6EXPL: 0CVE-2023-28200
https://notcve.org/view.php?id=CVE-2023-28200
08 May 2023 — A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Ventura 13.3, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. An app may be able to disclose kernel memory. • https://support.apple.com/en-us/HT213670 • CWE-20: Improper Input Validation •
CVSS: 10.0EPSS: 1%CPEs: 6EXPL: 0CVE-2023-28201
https://notcve.org/view.php?id=CVE-2023-28201
08 May 2023 — This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, tvOS 16.4. A remote user may be able to cause unexpected app termination or arbitrary code execution. • https://support.apple.com/en-us/HT213670 •