WID-SEC-W-2023-2288

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Apple iOS: Mehrere Schwachstellen ermöglichen Codeausführung

view advisory published 2023-09-07

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apple iOS und Apple iPadOS ausnutzen, um beliebigen Programmcode auszuführen.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2023-41064UShigh7.8OT criticalKEV
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.6.1 and iPadOS 16.6.1, macOS Monterey 12.6.9, macOS Ventura 13.5.2, iOS 15.7.9 an…
CVE-2023-41061UShigh7.8OT criticalKEV
A validation issue was addressed with improved logic. This issue is fixed in watchOS 9.6.2, iOS 16.6.1 and iPadOS 16.6.1. A maliciously crafted attachment may result in arbitrary c…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan