WID-SEC-W-2023-2427

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Apple iOS: Mehrere Schwachstellen

view advisory published 2023-09-21

Ein Angreifer kann mehrere Schwachstellen in Apple iOS und Apple iPadOS ausnutzen, um Sicherheitsmaßnahmen zu umgehen, seine Privilegien zu erweitern oder beliebigen Code auszuführen.

01

describes (3)

Related CVEs.

IDseverity exploitable
CVE-2023-41993UShigh8.8OT criticalKEV
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution. Apple is aware of a report that t…
CVE-2023-41992UShigh7.8OT criticalKEV
The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7, iOS 16.7 and iPadOS 16.7, macOS Ventura 13.6. A local attacker may be able to elevate thei…
CVE-2023-41991USmedium5.5OT criticalKEV
A certificate validation issue was addressed. This issue is fixed in macOS Ventura 13.6, iOS 16.7 and iPadOS 16.7. A malicious app may be able to bypass signature validation. Apple…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan