Skip to main content

Apple Products Multiple Vulnerabilities

Release Date: 1 Dec 2023 5249 Views

RISK: Extremely High Risk

TYPE: Operating Systems - Mobile & Apps

TYPE: Mobile & Apps

Multiple vulnerabilities were identified in Apple Products. A remote attacker could exploit some of these vulnerabilities to trigger  remote code execution and information disclosure on the targeted system.

 

Note:

For CVE-2023-42916 and CVE-2023-42917, processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.1.


Impact

  • Remote Code Execution
  • Information Disclosure

System / Technologies affected

  • Versions prior to Safari Safari 17.1.2
  • Versions prior to iOS 17.1.2
  • Versions prior to iPadOS 17.1.2
  • Versions prior to macOS Sonoma 14.1.2

Solutions

Before installation of the software, please visit the vendor web-site for more details.

Apply fixes issued by the vendor:

 

  • Safari 17.1.2
  • iOS 17.1.2
  • iPadOS 17.1.2
  • macOS Sonoma 14.1.2

Vulnerability Identifier


Source


Related Link