Multiple vulnerabilities in Apple iOS 16 and iPadOS 16

1) Information disclosure

EUVDB-ID: #VU82412

Risk: Low

CVSSv4.0: 0.4 [CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-41997

CWE-ID: CWE-200 - Information exposure

Exploit availability: No

The vulnerability allows a attacker to gain access to potentially sensitive information.

The vulnerability exists due to certain Siri options are present on the locked screen. An attacker with physical access to device can gain access to sensitive information.

Install update from vendor's website.

iPadOS: 16.0 20A362 - 16.7.1

Apple iOS: 16.0 20A362 - 16.7.1 20H30

• cpe:2.3:o:apple:ipados:16.7.1:*:*:*:*:*:*:*
• cpe:2.3:o:apple:apple_ios:16.7.1:20H30:*:*:*:*:*:*

https://support.apple.com/en-us/HT213981

Q & A

Can this vulnerability be exploited remotely?

No. The attacker should have physical access to the system in order to successfully exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Buffer overflow

EUVDB-ID: #VU82397

Risk: Medium

CVSSv4.0: 1.2 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2023-41983

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary error when processing HTML content in WebKit Process Model. A remote attacker can trick the victim to visit a specially crafted website, trigger memory corruption and perform a denial of service attack.

Install update from vendor's website.

iPadOS: 16.0 20A362 - 16.7.1

Apple iOS: 16.0 20A362 - 16.7.1 20H30

• cpe:2.3:o:apple:ipados:16.7.1:*:*:*:*:*:*:*
• cpe:2.3:o:apple:apple_ios:16.7.1:20H30:*:*:*:*:*:*

https://support.apple.com/en-us/HT213981

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Use-after-free

EUVDB-ID: #VU82395

Risk: High

CVSSv4.0: 6.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]

CVE-ID: CVE-2023-41976

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a use-after-free error when processing HTML content in WebKit. A remote attacker can trick the victim to open a specially crafted website, trigger a use-after-free error and execute arbitrary code on the target system.

Install update from vendor's website.

iPadOS: 16.0 20A362 - 16.7.1

Apple iOS: 16.0 20A362 - 16.7.1 20H30

• cpe:2.3:o:apple:ipados:16.7.1:*:*:*:*:*:*:*
• cpe:2.3:o:apple:apple_ios:16.7.1:20H30:*:*:*:*:*:*

https://support.apple.com/en-us/HT213981

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

4) Input validation error

EUVDB-ID: #VU82396

Risk: High

CVSSv4.0: 6.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]

CVE-ID: CVE-2023-42852

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote attacker to compromise the affected system.

The vulnerability exists due to a logic issue when handling HTML content in WebKit. A remote attacker can trick the victim to visit a specially crafted website and execute arbitrary code on the system.

Install update from vendor's website.

iPadOS: 16.0 20A362 - 16.7.1

Apple iOS: 16.0 20A362 - 16.7.1 20H30

• cpe:2.3:o:apple:ipados:16.7.1:*:*:*:*:*:*:*
• cpe:2.3:o:apple:apple_ios:16.7.1:20H30:*:*:*:*:*:*

https://support.apple.com/en-us/HT213981

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

5) Buffer overflow

EUVDB-ID: #VU82394

Risk: High

CVSSv4.0: 6.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]

CVE-ID: CVE-2023-40447

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error when processing HTML content in WebKit. A remote attacker can trick the victim to open a specially crafted website, trigger memory corruption and execute arbitrary code on the target system.

Install update from vendor's website.

iPadOS: 16.0 20A362 - 16.7.1

Apple iOS: 16.0 20A362 - 16.7.1 20H30

• cpe:2.3:o:apple:ipados:16.7.1:*:*:*:*:*:*:*
• cpe:2.3:o:apple:apple_ios:16.7.1:20H30:*:*:*:*:*:*

https://support.apple.com/en-us/HT213981

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

6) Information disclosure

EUVDB-ID: #VU82414

Risk: Low

CVSSv4.0: 1.2 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-32359

CWE-ID: CWE-200 - Information exposure

Exploit availability: No

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to a logic issue in WebKit. A remote attacker can trick the victim to visit a specially crafted website and use the VoiceOver feature to read aloud a user's password.

Install update from vendor's website.

iPadOS: 16.0 20A362 - 16.7.1

Apple iOS: 16.0 20A362 - 16.7.1 20H30

• cpe:2.3:o:apple:ipados:16.7.1:*:*:*:*:*:*:*
• cpe:2.3:o:apple:apple_ios:16.7.1:20H30:*:*:*:*:*:*

https://support.apple.com/en-us/HT213981

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

7) Inclusion of Sensitive Information in Log Files

EUVDB-ID: #VU82408

Risk: Low

CVSSv4.0: 1.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-41254

CWE-ID: CWE-532 - Information Exposure Through Log Files

Exploit availability: No

The vulnerability allows a local application to gain access to sensitive information.

The vulnerability exists due to Weather application stores sensitive information in log files. A local application can access sensitive user data.

Install update from vendor's website.

iPadOS: 16.0 20A362 - 16.7.1

Apple iOS: 16.0 20A362 - 16.7.1 20H30

• cpe:2.3:o:apple:ipados:16.7.1:*:*:*:*:*:*:*
• cpe:2.3:o:apple:apple_ios:16.7.1:20H30:*:*:*:*:*:*

https://support.apple.com/en-us/HT213981

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

8) Information disclosure

EUVDB-ID: #VU82413

Risk: Low

CVSSv4.0: 0.4 [CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-41982

CWE-ID: CWE-200 - Information exposure

Exploit availability: No

The vulnerability allows a attacker to gain access to potentially sensitive information.

The vulnerability exists due to certain Siri options are present on the locked screen. An attacker with physical access to device can gain access to sensitive information.

Install update from vendor's website.

iPadOS: 16.0 20A362 - 16.7.1

Apple iOS: 16.0 20A362 - 16.7.1 20H30

• cpe:2.3:o:apple:ipados:16.7.1:*:*:*:*:*:*:*
• cpe:2.3:o:apple:apple_ios:16.7.1:20H30:*:*:*:*:*:*

https://support.apple.com/en-us/HT213981

Q & A

Can this vulnerability be exploited remotely?

No. The attacker should have physical access to the system in order to successfully exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

9) Information disclosure

EUVDB-ID: #VU82411

Risk: Medium

CVSSv4.0: 1.2 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2023-41977

CWE-ID: CWE-200 - Information exposure

Exploit availability: No

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to excessive data output by Safari. A remote attacker can trick the victim to visit a specially crafted website and gain access to user's browsing history.

Install update from vendor's website.

iPadOS: 16.0 20A362 - 16.7.1

Apple iOS: 16.0 20A362 - 16.7.1 20H30

• cpe:2.3:o:apple:ipados:16.7.1:*:*:*:*:*:*:*
• cpe:2.3:o:apple:apple_ios:16.7.1:20H30:*:*:*:*:*:*

https://support.apple.com/en-us/HT213981

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

10) Buffer overflow

EUVDB-ID: #VU82390

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-40449

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

The vulnerability allows a local application to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary error in CoreAnimation. A local application can trigger memory corruption and perform a denial of service (DoS) attack.

Install update from vendor's website.

iPadOS: 16.0 20A362 - 16.7.1

Apple iOS: 16.0 20A362 - 16.7.1 20H30

• cpe:2.3:o:apple:ipados:16.7.1:*:*:*:*:*:*:*
• cpe:2.3:o:apple:apple_ios:16.7.1:20H30:*:*:*:*:*:*

https://support.apple.com/en-us/HT213981

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

11) Buffer overflow

EUVDB-ID: #VU82407

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-42841

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

The vulnerability allows a local application to escalate privileges on the system.

The vulnerability exists due to a boundary error in Pro Res. A local application can trigger memory corruption and execute arbitrary code with kernel privileges.

Install update from vendor's website.

iPadOS: 16.0 20A362 - 16.7.1

Apple iOS: 16.0 20A362 - 16.7.1 20H30

• cpe:2.3:o:apple:ipados:16.7.1:*:*:*:*:*:*:*
• cpe:2.3:o:apple:apple_ios:16.7.1:20H30:*:*:*:*:*:*

https://support.apple.com/en-us/HT213981

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

12) Information disclosure

EUVDB-ID: #VU82410

Risk: Low

CVSSv4.0: 1.7 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-42846

CWE-ID: CWE-200 - Information exposure

Exploit availability: No

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to an error in mDNSResponder. A remote attacker can passively track the device by its Wi-Fi MAC address.

Install update from vendor's website.

iPadOS: 16.0 20A362 - 16.7.1

Apple iOS: 16.0 20A362 - 16.7.1 20H30

• cpe:2.3:o:apple:ipados:16.7.1:*:*:*:*:*:*:*
• cpe:2.3:o:apple:apple_ios:16.7.1:20H30:*:*:*:*:*:*

https://support.apple.com/en-us/HT213981

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

13) State Issues

EUVDB-ID: #VU82409

Risk: Low

CVSSv4.0: 1.7 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-40408

CWE-ID: CWE-371 - State Issues

Exploit availability: No

The vulnerability allows a remote attacker to gain access to sensitive information.

The vulnerability exists due to an inconsistent user interface issue in My Drafts feature, which can unexpectedly deactivate the Hide My Email option. A remote attacker can gain access to potentially sensitive information.

Install update from vendor's website.

iPadOS: 16.0 20A362 - 16.7.1

Apple iOS: 16.0 20A362 - 16.7.1 20H30

• cpe:2.3:o:apple:ipados:16.7.1:*:*:*:*:*:*:*
• cpe:2.3:o:apple:apple_ios:16.7.1:20H30:*:*:*:*:*:*

https://support.apple.com/en-us/HT213981

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

14) Buffer overflow

EUVDB-ID: #VU82400

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-42849

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error within the OS kernel. A local user can trigger memory corruption, bypass kernel memory mitigations and execute arbitrary code with elevated privileges.

Install update from vendor's website.

iPadOS: 16.0 20A362 - 16.7.1

Apple iOS: 16.0 20A362 - 16.7.1 20H30

• cpe:2.3:o:apple:ipados:16.7.1:*:*:*:*:*:*:*
• cpe:2.3:o:apple:apple_ios:16.7.1:20H30:*:*:*:*:*:*

https://support.apple.com/en-us/HT213981

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

15) Buffer overflow

EUVDB-ID: #VU82399

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-40423

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

The vulnerability allows a local application to escalate privileges on the system.

The vulnerability exists due to a boundary error in IOTextEncryptionFamily. A local application can trigger memory corruption and execute arbitrary code with elevated privileges.

Install update from vendor's website.

iPadOS: 16.0 20A362 - 16.7.1

Apple iOS: 16.0 20A362 - 16.7.1 20H30

• cpe:2.3:o:apple:ipados:16.7.1:*:*:*:*:*:*:*
• cpe:2.3:o:apple:apple_ios:16.7.1:20H30:*:*:*:*:*:*

https://support.apple.com/en-us/HT213981

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

16) Out-of-bounds read

EUVDB-ID: #VU82398

Risk: Medium

CVSSv4.0: 4.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2023-40416

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition in ImageIO. A remote attacker can create a specially crafted image file, trick the victim into opening it, trigger an out-of-bounds read error and read contents of memory on the system.

Install update from vendor's website.

iPadOS: 16.0 20A362 - 16.7.1

Apple iOS: 16.0 20A362 - 16.7.1 20H30

• cpe:2.3:o:apple:ipados:16.7.1:*:*:*:*:*:*:*
• cpe:2.3:o:apple:apple_ios:16.7.1:20H30:*:*:*:*:*:*

https://support.apple.com/en-us/HT213981

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

17) Information disclosure

EUVDB-ID: #VU82392

Risk: Low

CVSSv4.0: 1.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-40413

CWE-ID: CWE-200 - Information exposure

Exploit availability: No

The vulnerability allows a local application to gain access to potentially sensitive information.

The vulnerability exists due to an error when handling cache in the Find My feature. A local application can read sensitive location information.

Install update from vendor's website.

iPadOS: 16.0 20A362 - 16.7.1

Apple iOS: 16.0 20A362 - 16.7.1 20H30

• cpe:2.3:o:apple:ipados:16.7.1:*:*:*:*:*:*:*
• cpe:2.3:o:apple:apple_ios:16.7.1:20H30:*:*:*:*:*:*

https://support.apple.com/en-us/HT213981

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

18) Buffer overflow

EUVDB-ID: #VU82726

Risk: High

CVSSv4.0: 6.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]

CVE-ID: CVE-2023-40446

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error in libc. A remote attacker can pass specially crafted input to user-installed applications on the system, trigger memory corruption and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Install updates from vendor's website.

iPadOS: 16.0 20A362 - 16.7.1

Apple iOS: 16.0 20A362 - 16.7.1 20H30

• cpe:2.3:o:apple:ipados:16.7.1:*:*:*:*:*:*:*
• cpe:2.3:o:apple:apple_ios:16.7.1:20H30:*:*:*:*:*:*

https://support.apple.com/en-us/HT213981

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

19) Inclusion of Sensitive Information in Log Files

EUVDB-ID: #VU86565

Risk: Low

CVSSv4.0: 1.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-42823

CWE-ID: CWE-532 - Information Exposure Through Log Files

Exploit availability: No

The vulnerability allows a local application to gain access to sensitive information.

The vulnerability exists due to the Core Recents component stores sensitive information into log files. A local application can read the log files and gain access to sensitive user data.

Install update from vendor's website.

iPadOS: 16.0 20A362 - 16.7.1

Apple iOS: 16.0 20A362 - 16.7.1 20H30

• cpe:2.3:o:apple:ipados:16.7.1:*:*:*:*:*:*:*
• cpe:2.3:o:apple:apple_ios:16.7.1:20H30:*:*:*:*:*:*

https://support.apple.com/en-us/HT213981

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

20) Heap-based buffer overflow

EUVDB-ID: #VU86566

Risk: High

CVSSv4.0: 6.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]

CVE-ID: CVE-2023-42848

CWE-ID: CWE-122 - Heap-based Buffer Overflow

Exploit availability: No

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error in ImageIO. A remote attacker can trick the victim to open a specially crafted image file, trigger a heap-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Install update from vendor's website.

iPadOS: 16.0 20A362 - 16.7.1

Apple iOS: 16.0 20A362 - 16.7.1 20H30

• cpe:2.3:o:apple:ipados:16.7.1:*:*:*:*:*:*:*
• cpe:2.3:o:apple:apple_ios:16.7.1:20H30:*:*:*:*:*:*

https://support.apple.com/en-us/HT213981

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

21) UNIX symbolic link following

EUVDB-ID: #VU86567

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-42942

CWE-ID: CWE-61 - UNIX Symbolic Link (Symlink) Following

Exploit availability: No

The vulnerability allows a local application to escalate privileges on the system.

The vulnerability exists due to a symlink following issue in libxpc. A local application can create a specially crafted symbolic link to a critical file on the system and overwrite it with privileges of the application.

Successful exploitation of this vulnerability may result in privilege escalation.

Install update from vendor's website.

iPadOS: 16.0 20A362 - 16.7.1

Apple iOS: 16.0 20A362 - 16.7.1 20H30

• cpe:2.3:o:apple:ipados:16.7.1:*:*:*:*:*:*:*
• cpe:2.3:o:apple:apple_ios:16.7.1:20H30:*:*:*:*:*:*

https://support.apple.com/en-us/HT213981

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

22) Buffer overflow

EUVDB-ID: #VU86568

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-42873

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

The vulnerability allows a local application to escalate privileges on the system.

The vulnerability exists due to a boundary error in Pro Res. A local application can trigger memory corruption and execute arbitrary code with kernel privileges.

Install update from vendor's website.

iPadOS: 16.0 20A362 - 16.7.1

Apple iOS: 16.0 20A362 - 16.7.1 20H30

• cpe:2.3:o:apple:ipados:16.7.1:*:*:*:*:*:*:*
• cpe:2.3:o:apple:apple_ios:16.7.1:20H30:*:*:*:*:*:*

https://support.apple.com/en-us/HT213981

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

23) Spoofing attack

EUVDB-ID: #VU86569

Risk: Medium

CVSSv4.0: 1.2 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2023-42843

CWE-ID: CWE-451 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)

Exploit availability: No

The vulnerability allows a remote attacker to perform spoofing attack.

The vulnerability exists due to incorrect processing of user-supplied data in WebKit. A remote attacker can spoof the browser address bar.

Install update from vendor's website.

iPadOS: 16.0 20A362 - 16.7.1

Apple iOS: 16.0 20A362 - 16.7.1 20H30

• cpe:2.3:o:apple:ipados:16.7.1:*:*:*:*:*:*:*
• cpe:2.3:o:apple:apple_ios:16.7.1:20H30:*:*:*:*:*:*

https://support.apple.com/en-us/HT213981

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.