WID-SEC-W-2023-3035

DeutschShown in its original language — a full translation is planned for a future version.

Apple iOS und Apple iPadOS: Mehrere Schwachstellen

view advisory published 2023-11-30

Ein entfernter Angreifer kann mehrere Schwachstellen in Apple iOS und Apple iPadOS ausnutzen, um beliebigen Code auszuführen oder vertrauliche Informationen offenzulegen.

describes (2)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2023-42917US	high8.8OT critical	9.29% (95th)	KEV	2023-11-30
A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web conte…
CVE-2023-42916US	medium6.5OT critical	17.8% (97th)	KEV	2023-11-30
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content…

references

External citations — patches, advisories, analysis.

Apple Security Advisory vom 2023-11-30external
Apple Security Advisory HT214062 vom 2024-01-22external
WID-SEC-W-2023-3035 - CSAF Versionself
WID-SEC-2023-3035 - Portal Versionself

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan