CVSS: 2.4EPSS: 0%CPEs: 1EXPL: 0CVE-2022-32871
https://notcve.org/view.php?id=CVE-2022-32871
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 16. A person with physical access to a device may be able to use Siri to access private calendar information • https://support.apple.com/en-us/HT213446 •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0CVE-2022-46709
https://notcve.org/view.php?id=CVE-2022-46709
A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Ventura 13, iOS 16. An app may be able to execute arbitrary code with kernel privileges • https://support.apple.com/en-us/HT213446 https://support.apple.com/en-us/HT213488 • CWE-787: Out-of-bounds Write •
CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 0CVE-2022-46716
https://notcve.org/view.php?id=CVE-2022-46716
A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2. Private Relay functionality did not match system settings • https://support.apple.com/en-us/HT213530 https://support.apple.com/en-us/HT213532 •
CVSS: 2.4EPSS: 0%CPEs: 2EXPL: 0CVE-2022-46717
https://notcve.org/view.php?id=CVE-2022-46717
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 16.2 and iPadOS 16.2. A user with physical access to a locked Apple Watch may be able to view user photos via accessibility features • https://support.apple.com/en-us/HT213530 https://support.apple.com/kb/HT213536 •
CVSS: 8.8EPSS: 0%CPEs: 6EXPL: 0CVE-2023-28205 – Apple Multiple Products WebKit Use-After-Free Vulnerability
https://notcve.org/view.php?id=CVE-2023-28205
A use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.4.1, iOS 15.7.5 and iPadOS 15.7.5, iOS 16.4.1 and iPadOS 16.4.1, macOS Ventura 13.3.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. A flaw was found in the webkitgtk package. • https://support.apple.com/en-us/HT213720 https://support.apple.com/en-us/HT213721 https://support.apple.com/en-us/HT213722 https://support.apple.com/en-us/HT213723 https://access.redhat.com/security/cve/CVE-2023-28205 https://bugzilla.redhat.com/show_bug.cgi?id=2185724 • CWE-416: Use After Free •