Skip to main content

Apple Products Multiple Vulnerabilities

Last Update Date: 23 Jan 2024 Release Date: 12 Dec 2023 5610 Views

RISK: Extremely High Risk

TYPE: Operating Systems - Mobile & Apps

TYPE: Mobile & Apps

Multiple vulnerabilities were identified in Apple Products. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, spoofing, remote code execution and information disclosure on the targeted system.

 

Note:

For CVE-2023-42916 and CVE-2023-42917, processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.1.

 

[Updated on 2024-01-23] 

Updated System / Technologies affected, Solutions and Related Links.

 

Apple also released the latest security bulletins for iOS, macOS, Safari, tvOS and WatchOS today. For details, please refer to  https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities_20240123


Impact

  • Remote Code Execution
  • Information Disclosure
  • Spoofing
  • Denial of Service

System / Technologies affected

  • Versions prior to iOS 15.8.1 and iPadOS 15.8.1
  • Versions prior to iOS 16.7.3 and iPadOS 16.7.3
  • Versions prior to iOS 17.2 and iPadOS 17.2
  • Versions prior to macOS Monterey 12.7.2
  • Versions prior to macOS Ventura 13.6.3
  • Versions prior to macOS Sonoma 14.2
  • Versions prior to Safari 17.2
  • Versions prior to tvOS 17.2
  • Versions prior to watchOS 10.2

Solutions

Before installation of the software, please visit the vendor web-site for more details.

Apply fixes issued by the vendor:

 

  • iOS 15.8.1 and iPadOS 15.8.1
  • iOS 16.7.3 and iPadOS 16.7.3
  • iOS 17.2 and iPadOS 17.2
  • macOS Monterey 12.7.2
  • macOS Ventura 13.6.3
  • macOS Sonoma 14.2
  • Safari 17.2
  • tvOS 17.2
  • watchOS 10.2

Vulnerability Identifier


Source


Related Link