CVE Vulnerability Advisory Database

[Affected Scope] On-premises deployments of VeloCloud Orchestrator (VCO)

[Impact] Unauthenticated remote attackers can access privileged internal functionalities and execute arbitrary OS commands (CWE-78), leading to complete compromise of the orchestrator's confidentiality, integrity, and availability

[Mitigation] Immediately apply the official security patches provided by the vendor and restrict external network access to the orchestrator management interface

[Affected Scope] Apple iOS and iPadOS prior to 16.6.1, macOS Monterey prior to 12.6.9, macOS Ventura prior to 13.5.2, iOS/iPadOS prior to 15.7.9, and macOS Big Sur prior to 11.7.10

[Impact] Processing a maliciously crafted image can trigger a buffer overflow, leading to arbitrary code execution (RCE) and potential system takeover

[Mitigation] Immediately apply the official security updates (iOS 16.6.1, macOS 13.5.2, etc.) and consider enabling Lockdown Mode for high-risk environments

[Affected Scope] Apple iOS devices prior to 16.6.1, iPadOS devices prior to 16.6.1, and watchOS devices prior to 9.6.2

[Impact] A maliciously crafted attachment can bypass validation logic, allowing attackers to execute arbitrary code with system privileges without user interaction

[Mitigation] Immediately update affected devices to iOS 16.6.1, iPadOS 16.6.1, watchOS 9.6.2, or later versions

[Affected Scope] Systems running iOS/iPadOS prior to 16.5.1, iOS/iPadOS prior to 15.7.7, macOS Ventura prior to 13.4.1, and Safari prior to 16.5.1

[Impact] Processing maliciously crafted web content may lead to memory corruption, allowing remote attackers to execute arbitrary code on the target device

[Mitigation] Immediately apply the official software updates provided by Apple to patch the operating system and Safari browser

[Affected Scope] iOS/iPadOS 15 and 16, macOS Ventura, watchOS, tvOS, and Safari versions prior to 16.5

[Impact] Processing maliciously crafted web content may lead to arbitrary code execution (RCE), and Apple is aware of active exploitation in the wild

[Mitigation] Immediately update operating systems and Safari to the latest patched versions using Apple's official software update mechanism

[Affected Scope] All Apple devices running versions prior to iOS/iPadOS 15.7.6 and 16.5, macOS Ventura 13.4, tvOS 16.5, watchOS 9.5, and Safari 16.5

[Impact] Processing maliciously crafted web content may lead to out-of-bounds memory access, disclosing sensitive system information and enabling further sandbox escape or privilege escalation

[Mitigation] Immediately apply official Apple software updates to upgrade to iOS 16.5, macOS Ventura 13.4, Safari 16.5, or later