Latest CVE Feed
-
6.5
MEDIUMCVE-2023-47993
A Buffer out-of-bound read vulnerability in Exif.cpp::ReadInt32 in FreeImage 3.18.0 allows attackers to cause a denial-of-service.... Read more
Affected Products : freeimage- Published: Jan. 09, 2024
- Modified: Jun. 20, 2025
-
4.2
MEDIUMCVE-2023-42934
An information disclosure issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14, iOS 17 and iPadOS 17. An app with root privileges may be able to access private information.... Read more
- Published: Jan. 10, 2024
- Modified: Jun. 20, 2025
-
7.5
HIGHCVE-2023-42869
Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Ventura 13.4, iOS 16.5 and iPadOS 16.5. Multiple issues in libxml2.... Read more
- Published: Jan. 10, 2024
- Modified: Jun. 20, 2025
-
6.5
MEDIUMCVE-2023-42862
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, tvOS 16.4, iOS 16.4 and iPadOS 16.4, watchOS 9.4. Processing an image may result in disclosure of process memory.... Read more
- Published: Jan. 10, 2024
- Modified: Jun. 20, 2025
-
7.0
HIGHCVE-2023-42832
A race condition was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.7.9, macOS Monterey 12.6.8, macOS Ventura 13.5. An app may be able to gain root privileges.... Read more
Affected Products : macos- Published: Jan. 10, 2024
- Modified: Jun. 20, 2025
-
7.8
HIGHCVE-2023-42826
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing a file may lead to arbitrary code execution.... Read more
Affected Products : macos- Published: Jan. 10, 2024
- Modified: Jun. 20, 2025
-
5.5
MEDIUMCVE-2023-41994
A logic issue was addressed with improved checks This issue is fixed in macOS Sonoma 14. A camera extension may be able to access the camera view from apps other than the app for which it was granted permission.... Read more
Affected Products : macos- Published: Jan. 10, 2024
- Modified: Jun. 20, 2025
-
7.8
HIGHCVE-2023-41974
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17. An app may be able to execute arbitrary code with kernel privileges.... Read more
- Published: Jan. 10, 2024
- Modified: Jun. 20, 2025
-
8.8
HIGHCVE-2023-41060
A type confusion issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14, iOS 17 and iPadOS 17. A remote user may be able to cause kernel code execution.... Read more
- Published: Jan. 10, 2024
- Modified: Jun. 20, 2025
-
5.5
MEDIUMCVE-2023-40438
An issue was addressed with improved handling of temporary files. This issue is fixed in macOS Sonoma 14, iOS 16.7 and iPadOS 16.7. An app may be able to access edited photos saved to a temporary directory.... Read more
- Published: Jan. 10, 2024
- Modified: Jun. 20, 2025
-
5.5
MEDIUMCVE-2023-40430
A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. An app may be able to access removable volumes without user consent.... Read more
Affected Products : macos- Published: Jan. 10, 2024
- Modified: Jun. 20, 2025
-
9.8
CRITICALCVE-2023-40414
A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 10, iOS 17 and iPadOS 17, tvOS 17, macOS Sonoma 14, Safari 17. Processing web content may lead to arbitrary code execution.... Read more
- Published: Jan. 10, 2024
- Modified: Jun. 20, 2025
-
3.3
LOWCVE-2023-40394
The issue was addressed with improved validation of environment variables. This issue is fixed in iOS 16.6 and iPadOS 16.6. An app may be able to access sensitive user data.... Read more
- Published: Jan. 10, 2024
- Modified: Jun. 20, 2025
-
5.5
MEDIUMCVE-2023-36629
The ST ST54-android-packages-apps-Nfc package before 130-20230215-23W07p0 for Android has an out-of-bounds read.... Read more
Affected Products : st54-android-packages-apps-nfc- Published: Jan. 09, 2024
- Modified: Jun. 20, 2025
-
7.1
HIGHCVE-2023-32436
The issue was addressed with improved bounds checks. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system termination or write kernel memory.... Read more
Affected Products : macos- Published: Jan. 10, 2024
- Modified: Jun. 20, 2025
-
7.8
HIGHCVE-2023-32383
This issue was addressed by forcing hardened runtime on the affected binaries at the system level. This issue is fixed in macOS Monterey 12.6.6, macOS Big Sur 11.7.7, macOS Ventura 13.4. An app may be able to inject code into sensitive binaries bundled wi... Read more
Affected Products : macos- Published: Jan. 10, 2024
- Modified: Jun. 20, 2025
-
9.8
CRITICALCVE-2023-31446
In Cassia Gateway firmware XC1000_2.1.1.2303082218 and XC2000_2.1.1.2303090947, the queueUrl parameter in /bypass/config is not sanitized. This leads to injecting Bash code and executing it with root privileges on device startup.... Read more
- Published: Jan. 10, 2024
- Modified: Jun. 20, 2025
-
7.8
HIGHCVE-2022-47965
The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13. An app may be able to execute arbitrary code with kernel privileges.... Read more
Affected Products : macos- Published: Jan. 10, 2024
- Modified: Jun. 20, 2025
-
7.8
HIGHCVE-2022-47915
The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13. An app may be able to execute arbitrary code with kernel privileges.... Read more
Affected Products : macos- Published: Jan. 10, 2024
- Modified: Jun. 20, 2025
-
5.5
MEDIUMCVE-2022-46710
A logic issue was addressed with improved checks. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1. Location data may be shared via iCloud links even if Location metadata is disabled via the Share Sheet.... Read more
- Published: Jan. 10, 2024
- Modified: Jun. 20, 2025