WID-SEC-W-2023-2572

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Apple iPadOS und iOS: Mehrere Schwachstellen

view advisory published 2023-10-04

Ein lokaler Angreifer kann mehrere Schwachstellen in Apple iPadOS und Apple iOS ausnutzen, um seine Privilegien zu erhöhen oder beliebigen Code auszuführen.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2023-42824UShigh7.8OT criticalKEV
The issue was addressed with improved checks. This issue is fixed in iOS 16.7.1 and iPadOS 16.7.1. A local attacker may be able to elevate their privileges. Apple is aware of a rep…
CVE-2023-5217UShigh8.8OT criticalKEV
Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a cra…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan