CVE Vulnerability Advisory Database

[Affected Scope] Apple iOS prior to 17.1.2, iPadOS prior to 17.1.2, macOS Sonoma prior to 14.1.2, and Safari prior to 17.1.2

[Impact] Processing maliciously crafted web content may lead to arbitrary code execution, with active exploitation reported in the wild

[Mitigation] Immediately apply the official Apple software updates to upgrade operating systems and Safari to the patched versions

[Affected Scope] Apple devices running versions prior to iOS 17.1.2, iPadOS 17.1.2, macOS Sonoma 14.1.2, and Safari 17.1.2

[Impact] Processing maliciously crafted web content may lead to out-of-bounds memory access, disclosing sensitive information and potentially enabling sandbox escape or remote code execution

[Mitigation] Immediately apply the official security updates (iOS/iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2 or later) and enable Lockdown Mode for high-risk users

[Affected Scope] Apple WebKit-based browsers and applications on iOS versions prior to 16.7 and macOS prior to Sonoma 14

[Impact] Processing maliciously crafted web content may lead to arbitrary code execution on the target system

[Mitigation] Immediately update Apple operating systems to the latest versions (iOS 16.7+ / macOS Sonoma 14+)

[Affected Scope] Apple iOS devices prior to 16.7, iPadOS prior to 16.7, macOS Monterey prior to 12.7, and macOS Ventura prior to 13.6

[Impact] A local attacker can bypass security boundaries to elevate privileges to kernel level, enabling arbitrary code execution and full device compromise; actively exploited in the wild

[Mitigation] Immediately apply the official security updates to iOS/iPadOS 16.7, macOS Monterey 12.7, macOS Ventura 13.6, or later versions

[Affected Scope] Apple devices running iOS versions prior to 16.7, iPadOS versions prior to 16.7, and macOS Ventura versions prior to 13.6

[Impact] A malicious application can bypass signature and certificate validation, allowing it to execute with elevated privileges and compromise the system. This has been actively exploited in the wild

[Mitigation] Immediately update all affected devices to iOS/iPadOS 16.7 or later, and macOS Ventura 13.6 or later

[Affected Scope] Apple iOS/iPadOS prior to 15.7.8 and 16.3, macOS Monterey prior to 12.6.8, macOS Big Sur prior to 11.7.9, macOS Ventura prior to 13.2, tvOS prior to 16.3, and watchOS prior to 9.3

[Impact] Processing a maliciously crafted font file may lead to arbitrary code execution (RCE) with system privileges, and active exploitation in the wild has been reported

[Mitigation] Immediately update all affected Apple devices to the latest patched OS versions (iOS 15.7.8 / 16.3, macOS 12.6.8 / 11.7.9 / 13.2 or later)

[Affected Scope] Apple iOS and iPadOS prior to 16.6.1, macOS Monterey prior to 12.6.9, macOS Ventura prior to 13.5.2, iOS/iPadOS prior to 15.7.9, and macOS Big Sur prior to 11.7.10

[Impact] Processing a maliciously crafted image can trigger a buffer overflow, leading to arbitrary code execution (RCE) and potential system takeover

[Mitigation] Immediately apply the official security updates (iOS 16.6.1, macOS 13.5.2, etc.) and consider enabling Lockdown Mode for high-risk environments

[Affected Scope] Apple iOS/iPadOS prior to 15.6, macOS Monterey prior to 12.5, Safari prior to 15.6, watchOS prior to 8.7, and tvOS prior to 15.6

[Impact] Processing maliciously crafted web content may allow remote attackers to execute arbitrary code on the target system

[Mitigation] Immediately apply the official software updates provided by Apple to upgrade to patched versions

[Affected Scope] Apple iOS and iPadOS prior to 15.7.8 / 16.6, macOS Big Sur prior to 11.7.9, macOS Monterey prior to 12.6.8, macOS Ventura prior to 13.5, tvOS prior to 16.6, and watchOS prior to 9.6

[Impact] A local application can bypass kernel memory protections and modify sensitive kernel states, leading to complete system compromise and arbitrary code execution

[Mitigation] Immediately apply the official security updates provided by Apple (iOS 15.7.8 / 16.6, macOS 13.5, etc.) and enforce updates via MDM

[Affected Scope] Apple iOS before 16.6, iPadOS before 16.6, macOS Ventura before 13.5, Safari before 16.5.2, tvOS before 16.6, and watchOS before 9.6

[Impact] Processing maliciously crafted web content may lead to arbitrary code execution (RCE) within the sandbox context, and this vulnerability has been actively exploited in the wild

[Mitigation] Immediately apply the official software updates provided by Apple to patch the operating systems and Safari browser

[Affected Scope] Systems running iOS/iPadOS prior to 16.5.1, iOS/iPadOS prior to 15.7.7, macOS Ventura prior to 13.4.1, and Safari prior to 16.5.1

[Impact] Processing maliciously crafted web content may lead to memory corruption, allowing remote attackers to execute arbitrary code on the target device

[Mitigation] Immediately apply the official software updates provided by Apple to patch the operating system and Safari browser

[Affected Scope] iOS versions prior to 15.7.7 and 16.4, iPadOS prior to 15.7.7 and 16.4, macOS Ventura prior to 13.3, and Safari prior to 16.4

[Impact] Processing maliciously crafted web content may lead to arbitrary code execution and complete system compromise

[Mitigation] Immediately apply official Apple software updates to secure versions (iOS 15.7.7/16.4, macOS Ventura 13.3, etc.)

[Affected Scope] Systems running iOS/iPadOS prior to 15.7.7 and 16.5.1, macOS Big Sur/Monterey/Ventura prior to specific patched releases, and watchOS prior to 8.8.1 and 9.5.2

[Impact] A local application can exploit this vulnerability to execute arbitrary code with kernel privileges, leading to complete system compromise. Active exploitation has been reported in the wild

[Mitigation] Immediately apply the official security updates provided by Apple (e.g., iOS 16.5.1, macOS 13.4.1)

[Affected Scope] iOS/iPadOS 15 and 16, macOS Ventura, watchOS, tvOS, and Safari versions prior to 16.5

[Impact] A remote attacker can bypass the Web Content sandbox and potentially execute arbitrary code on the host system due to a bounds check validation flaw, which is actively exploited in the wild

[Mitigation] Immediately apply the official security updates provided by Apple (iOS 16.5, macOS 13.4, Safari 16.5, etc.)

[Affected Scope] iOS/iPadOS 15 and 16, macOS Ventura, watchOS, tvOS, and Safari versions prior to 16.5

[Impact] Processing maliciously crafted web content may lead to arbitrary code execution (RCE), and Apple is aware of active exploitation in the wild

[Mitigation] Immediately update operating systems and Safari to the latest patched versions using Apple's official software update mechanism

[Affected Scope] All Apple devices running versions prior to iOS/iPadOS 15.7.6 and 16.5, macOS Ventura 13.4, tvOS 16.5, watchOS 9.5, and Safari 16.5

[Impact] Processing maliciously crafted web content may lead to out-of-bounds memory access, disclosing sensitive system information and enabling further sandbox escape or privilege escalation

[Mitigation] Immediately apply official Apple software updates to upgrade to iOS 16.5, macOS Ventura 13.4, Safari 16.5, or later

[Affected Scope] iOS and iPadOS versions prior to 15.7.5 / 16.4.1, macOS Big Sur prior to 11.7.6, Monterey prior to 12.6.5, and Ventura prior to 13.3.1

[Impact] A local application can execute arbitrary code with kernel privileges, leading to complete system compromise. This vulnerability is actively exploited in the wild

[Mitigation] Immediately apply the official security updates provided by Apple (e.g., iOS 16.4.1, macOS 13.3.1)

[Affected Scope] Systems running Safari prior to 16.4.1, iOS/iPadOS prior to 15.7.5 and 16.4.1, and macOS Ventura prior to 13.3.1

[Impact] Processing maliciously crafted web content may lead to arbitrary code execution due to a Use-After-Free memory corruption issue, which has been actively exploited in the wild

[Mitigation] Immediately apply the official security updates and OS patches provided by Apple

[Affected Scope] Apple devices running iOS versions prior to 16.3.1, iPadOS versions prior to 16.3.1, macOS Ventura versions prior to 13.2.1, and Safari versions prior to 16.3

[Impact] Processing maliciously crafted web content may lead to arbitrary code execution (RCE). This vulnerability has been actively exploited in the wild

[Mitigation] Immediately apply the official security updates provided by Apple to upgrade to patched versions

[Affected Scope] Apple WebKit engine in Safari prior to 16.2, tvOS prior to 16.2, macOS Ventura prior to 13.1, iOS prior to 15.7.2/16.1.2, and iPadOS prior to 15.7.2

[Impact] Processing maliciously crafted web content may lead to arbitrary code execution (RCE) on the target system, with active exploitation observed in the wild

[Mitigation] Immediately update affected Apple operating systems and Safari browsers to the latest patched versions (iOS 16.2, macOS 13.1, or later)