CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“2 of 2 advisories (Page 1/1)
CVE-2023-282068.6/HIGHEPSS 23.2%CISA KEV
2023-04-10

Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability (CVE-2023-28206) Analysis and Mitigation Guide

[Affected Scope] iOS and iPadOS versions prior to 15.7.5 / 16.4.1, macOS Big Sur prior to 11.7.6, Monterey prior to 12.6.5, and Ventura prior to 13.3.1

[Impact] A local application can execute arbitrary code with kernel privileges, leading to complete system compromise. This vulnerability is actively exploited in the wild

[Mitigation] Immediately apply the official security updates provided by Apple (e.g., iOS 16.4.1, macOS 13.3.1)

CVE-2021-309007.8/HIGHEPSS 5.2%CISA KEV
2021-08-24

Apple iOS and iPadOS Kernel Out-of-Bounds Write Vulnerability (CVE-2021-30900) Technical Advisory

[Affected Scope] Apple iOS and iPadOS devices running versions prior to 14.8.1 or 15.1

[Impact] A malicious local application can exploit this vulnerability to execute arbitrary code with kernel privileges, leading to complete device compromise

[Mitigation] Immediately update affected devices to iOS/iPadOS 14.8.1, 15.1, or later versions

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse